CVE-2020-1648

CVE-2020-1648 describes a denial-of-service vulnerability in Juniper Networks Junos OS and Junos OS Evolved. Processing a specially crafted BGP packet can cause the routing process daemon (RPD) to crash and restart, leading to an extended DoS condition if repeated. This vulnerability affects specific versions of Junos OS and Junos OS Evolved, primarily those released after 18.2X75-D50.8 and 19.4R1 respectively. Rated with a CVSS score of 7.5 (High), this vulnerability is remotely exploitable with low attack complexity, requiring no user interaction or privileges, and its primary impact is high availability loss. While the EPSS score is low, indicating a low likelihood of exploitation, the FAUCET Risk Score is 50/100. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has also received minimal community discussion or media coverage, suggesting a low profile despite its potential impact.