CVE-2020-1645

CVE-2020-1645 describes a vulnerability in Juniper Networks Junos OS on MX Series devices with specific MS-PIC, MS-MIC, or MS-MPC cards when DNS filtering is enabled. An incoming packet stream can crash the mspmand process, causing the Services PIC to restart and temporarily bypass all services, including DNS filtering. This issue affects various Junos OS versions from 17.3 to 19.4. The vulnerability has a CVSS score of 8.3 (HIGH), indicating a severe risk. It can be exploited remotely over the network with low attack complexity and no user interaction, potentially leading to a partial loss of confidentiality, integrity, and availability. The primary impact is the temporary bypass of critical security services like DNS sinkholing. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.