CVE-2020-1669

CVE-2020-1669 is a medium-severity vulnerability affecting Juniper Networks NFX350 Series devices running specific versions of Junos OS. The Juniper Device Manager (JDM) container stores password hashes in the world-readable /etc/passwd file, which is a security misconfiguration. An attacker with local filesystem access could brute-force these hashes, potentially leading to unauthorized access. The CVSS score is 6.3 (MEDIUM), indicating a local attack vector with high impact on confidentiality and integrity, but requiring high attack complexity and low privileges. While the EPSS score is very low, suggesting a minimal likelihood of exploitation, this vulnerability still poses a risk if an attacker gains initial access. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. This suggests it is not currently a widely targeted vulnerability.