CVE-2020-1666
Summary
| CVE | CVE-2020-1666 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-10-16 21:15:00 UTC |
| Updated | 2021-10-25 15:20:00 UTC |
| Description | The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactive session and possibly gain administrative privileges. This issue affects all Juniper Networks Junos OS Evolved versions after 18.4R1-EVO, prior to 20.2R1-EVO. |
Risk And Classification
Problem Types: CWE-613
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Juniper | Junos Evolved | 19.2 | r1 | All | All |
| Operating System | Juniper | Junos Evolved | 19.2 | r2 | All | All |
| Operating System | Juniper | Junos Evolved | 19.3 | r2 | All | All |
| Operating System | Juniper | Junos Evolved | 19.4 | r1 | All | All |
| Operating System | Juniper | Junos Evolved | 19.4 | r2 | All | All |
| Operating System | Juniper | Junos Evolved | 19.4 | r2-s1 | All | All |
| Operating System | Juniper | Junos Evolved | 20.1 | r1 | All | All |
| Operating System | Juniper | Junos Evolved | 19.2 | r1 | All | All |
| Operating System | Juniper | Junos Evolved | 19.2 | r2 | All | All |
| Operating System | Juniper | Junos Evolved | 19.3 | r2 | All | All |
| Operating System | Juniper | Junos Evolved | 19.4 | r1 | All | All |
| Operating System | Juniper | Junos Evolved | 19.4 | r2 | All | All |
| Operating System | Juniper | Junos Evolved | 19.4 | r2-s1 | All | All |
| Operating System | Juniper | Junos Evolved | 20.1 | r1 | All | All |
| Operating System | Juniper | Junos Os Evolved | 19.2 | r1 | All | All |
| Operating System | Juniper | Junos Os Evolved | 19.2 | r2 | All | All |
| Operating System | Juniper | Junos Os Evolved | 19.3 | r2 | All | All |
| Operating System | Juniper | Junos Os Evolved | 19.4 | r1 | All | All |
| Operating System | Juniper | Junos Os Evolved | 19.4 | r2 | All | All |
| Operating System | Juniper | Junos Os Evolved | 19.4 | r2-s1 | All | All |
| Operating System | Juniper | Junos Os Evolved | 20.1 | r1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2020-10 Security Bulletin: Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection (CVE-2020-1666) - Juniper Networks | CONFIRM | kb.juniper.net | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.