VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Oct 16, 2020· Updated Jun 17, 2026

CVE-2020-1666

CVE-2020-1666

Description

The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactive session and possibly gain administrative privileges. This issue affects all Juniper Networks Junos OS Evolved versions after 18.4R1-EVO, prior to 20.2R1-EVO.

Affected products

9
  • Juniper Networks/OS Evolved9 versions
    cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*
    • (no CPE)range: >18.4R1-EVO,<20.2R1-EVO
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.