DeutschShown in its original language — a full translation is planned for a future version.
Juniper JUNOS OS, Space, OS Evolved: Mehrere Schwachstellen
view advisory published 2025-10-08
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.
01
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-60010US | — | — | ||
A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access the device without e… | ||||
| CVE-2025-60006US | — | — | ||
Multiple instances of an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulnerability in the CLI of Juniper Networks Junos OS Evolved… | ||||
| CVE-2025-60004US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticat… | ||||
| CVE-2025-59980US | — | — | ||
An Authentication Bypass by Primary Weakness
in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to f… | ||||
| CVE-2025-59976US | — | — | ||
An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any… | ||||
| CVE-2025-59975US | — | — | ||
An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device w… | ||||
| CVE-2025-59968US | —OT elevated | — | ||
A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web… | ||||
| CVE-2025-59967US | — | — | ||
A NULL Pointer Dereference vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, AC… | ||||
| CVE-2025-59964US | — | — | ||
A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX4700 devices allows an unauthenticated, network-based attacke… | ||||
| CVE-2025-59962US | — | — | ||
An Access of Uninitialized Pointer vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an attac… | ||||
| CVE-2025-59958US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthentic… | ||||
| CVE-2025-59957US | — | — | ||
An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with… | ||||
| CVE-2025-52961US | — | — | ||
An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management (CFM) daemon and the Connectivity Fault Management Manager (cfmman) of Juniper Networks Juno… | ||||
| CVE-2025-52960US | — | — | ||
A Buffer Copy without Checking Size of Input vulnerability in the
Session Initialization Protocol (SIP) ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an una… | ||||
| CVE-2025-11198US | —OT elevated | — | ||
A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legi… | ||||
| CVE-2025-59977US | — | — | ||
02
references
External citations — patches, advisories, analysis.
- Juniper Security Advisory JSA103157 vom 2025-10-08external
- Juniper Security Advisory JSA103146 vom 2025-10-08external
- Juniper Security Advisory JSA103156 vom 2025-10-08external
- Juniper Security Advisory JSA103163 vom 2025-10-08external
- Juniper Security Advisory JSA103147 vom 2025-10-08external
- Juniper Security Advisory JSA103144 vom 2025-10-08external
- Juniper Security Advisory JSA103143 vom 2025-10-08external
- Juniper Security Advisory JSA103153 vom 2025-10-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan