CVE-2020-1654

highpriority · track · 40EPSS 0.022 · 83 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.23% (83rd) EPSS

CVSS 7.5 · high

Is it mine?

28 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP message may result in an extended Denial of Service (DoS) condition. The offending HTTP message that causes this issue may originate both from the HTTP server or the HTTP client. This issue affects Juniper Networks Junos OS on SRX Series: 18.1 versions prior to 18.1R3-S9 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · sirt@juniper.net USexploitability 3.9 · impact 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-120USprimaryCWE-120US

affected products (28)

Products and version ranges known to be affected.

Juniper Networks Junos OS18.2 → 18.2R2-S7, 18.2R3-S3enisa_euvdEU
Juniper Networks Junos OS18.3 → 18.3R1-S7, 18.3R2-S4, 18.3R3-S1enisa_euvdEU
Juniper Networks Junos OS18.4 → 18.4R1-S7, 18.4R2-S4, 18.4R3enisa_euvdEU
Juniper Networks Junos OS19.1 → 19.1R1-S5, 19.1R2enisa_euvdEU
Juniper Networks Junos OS19.2 → 19.2R1-S2, 19.2R2enisa_euvdEU
Juniper Networks Junos OS19.3 → 19.3R2enisa_euvdEU
Juniper Networks Inc. JunOS≤ 18.4R3fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.4R2-S4fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.4R1-S7fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.3R3-S1fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.3R2-S4fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.3R1-S7fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.2R3-S3fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.2R2-S7fstec_bduRU
Juniper Networks Inc. JunOS≤ 18.1R3-S9fstec_bduRU
Juniper Networks Inc. JunOS≤ 19.1R2fstec_bduRU
Juniper Networks Inc. JunOS≤ 19.4R1fstec_bduRU
Juniper Networks Inc. JunOS≤ 19.3R2fstec_bduRU
Juniper Networks Inc. JunOS≤ 19.2R2fstec_bduRU
Juniper Networks Inc. JunOS≤ 19.2R1-S2fstec_bduRU

showing 20 of 28

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2020-07-17modified 2026-06-17

related (5,668)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-43520US	medium5.5OT critical	0.43% (37th)	KEV	2025-12-12
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS So…
CVE-2025-20333US	—OT critical	71.2% (99th)	KEV	2025-09-25
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut…
CVE-2025-39682US	critical9.8OT critical	3.25% (88th)	KEV	2025-09-05
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contig…
CVE-2025-31277US	—OT critical	1.66% (77th)	KEV	2025-07-30
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc…
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	2025-03-11
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

+5663 more

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan