« Volver al listado

CVE-2020-1611

Estado: ModificadaMedia (6.5)—💥 PoC

A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

⚠️ Las pruebas de concepto de GitHub no están verificadas: algunas son falsas o contienen malware. No las ejecute nunca fuera de un laboratorio aislado.

Tecnologías afectadas (1)

Juniper — Junos Space

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-1611",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos Space",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "19.4R1",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-01-15T09:15:12.857",
  "references": [
    {
      "url": "https://kb.juniper.net/JSA10993",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1449224",
      "tags": [
        "Permissions Required"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10993",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1449224",
      "tags": [
        "Permissions Required"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Inclusión de Archivo Local en Juniper Networks Junos Space, permite a un atacante visualizar todos los archivos en el destino cuando el dispositivo recibe paquetes HTTP maliciosos. Este problema afecta a: Juniper Networks Junos Space versiones anteriores a 19.4R1."
    }
  ],
  "lastModified": "2026-06-17T03:01:52.733",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:17.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DFF54CC-E24F-42B4-B908-AECD1139146B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:17.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E80FD6E-A2E7-4B8C-BFC8-D9B0F32245C7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:18.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58BFEC5C-5F42-4222-8B5B-AAC9466AEC94"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:18.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7BA0A62-CEBF-4B19-AB8C-AB29209EC59E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:18.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93C64B73-6631-4369-9CC3-8CE4EDB7A790"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:18.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD163C75-D934-4960-9834-8BA2A0218A10"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:19.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "222D409D-F0C5-4B52-84FC-D199A00A7ED0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:19.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34CAC9C5-05C5-4027-A011-6EAA3DC5DB03"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_space:19.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C04B6957-6526-4387-B146-8D9A11943F59"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}