DeutschShown in its original language — a full translation is planned for a future version.
Juniper JUNOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation
view advisory published 2025-07-09
Ein entfernter Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper MX Series, Juniper SRX Series und Juniper Security Director ausnutzen, um Daten zu manipulieren oder offenzulegen, Sicherheitsmaßnahmen zu umgehen, Code auszuführen, einen Denial of Service zu verursachen oder seine Privilegien zu erweitern.
01
describes (26)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-6549US | —OT elevated | — | ||
An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the
Juniper Web D… | ||||
| CVE-2025-52989US | — | — | ||
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to mo… | ||||
| CVE-2025-52988US | — | — | ||
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a hi… | ||||
| CVE-2025-52986US | — | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low privil… | ||||
| CVE-2025-52985US | — | — | ||
A Use of Incorrect Operator
vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security… | ||||
| CVE-2025-52984US | — | — | ||
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to… | ||||
| CVE-2025-52983US | — | — | ||
A UI Discrepancy for Security Feature
vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device… | ||||
| CVE-2025-52982US | — | — | ||
An Improper Resource Shutdown or Release vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC allows an unauthenticated, network-based attacker to cau… | ||||
| CVE-2025-52981US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on
SRX1600, SRX2300, SRX 4000 Seri… | ||||
| CVE-2025-52980US | — | — | ||
A Use of Incorrect Byte Ordering
vulnerability
in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on SRX300 Series allows an unauthenticated, network-based attac… | ||||
| CVE-2025-52964US | — | — | ||
A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to caus… | ||||
| CVE-2025-52963US | — | — | ||
An Improper Access Control vulnerability in the User Interface (UI) of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an interface, leading to a De… | ||||
| CVE-2025-52958US | — | — | ||
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a D… | ||||
| CVE-2025-52955US | — | — | ||
An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated atta… | ||||
| CVE-2025-52954US | —OT elevated | — | ||
A Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved allows a local, low-privileged user to gain root pri… | ||||
| CVE-2025-52953US | — | — | ||
An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker send… | ||||
| CVE-2025-52952US | — | — | ||
An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards allo… | ||||
| CVE-2025-52951US | — | — | ||
A Protection Mechanism Failure vulnerability in kernel filter processing of Juniper Networks Junos OS allows an attacker sending IPv6 traffic destined to the device to effectively… | ||||
| CVE-2025-52950US | —OT elevated | — | ||
A Missing Authorization vulnerability in Juniper Networks Security Director allows an unauthenticated network-based attacker to read or tamper with multiple sensitive resources via… | ||||
| CVE-2025-52949US | — | — | ||
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjac… | ||||
showing 20 of 26
02
references
External citations — patches, advisories, analysis.
- Juniper Security Bulletin CVE-2025-26466-resolved-in-9-3R2-release vom 2025-07-09external
- Juniper Security Bulletin CVE-2025-52950 vom 2025-07-09external
- Juniper Security Bulletin CVE-2025-52963 vom 2025-07-09external
- Juniper Security Bulletin CVE-2025-52947 vom 2025-07-09external
- Juniper Security Bulletin CVE-2025-52983 vom 2025-07-09external
- Juniper Security Bulletin CVE-2025-52954 vom 2025-07-09external
- Juniper Security Bulletin VU#199397 vom 2025-07-09external
- Juniper Security Bulletin CVE-2025-52985 vom 2025-07-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan