CVE-2025-21589
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device.
This issue affects Session Smart Router:
from 5.6.7 before 5.6.17,
from 6.0 before 6.0.8 (affected from 6.0.8),
from 6.1 before 6.1.12-lts,
from 6.2 before 6.2.8-lts,
from 6.3 before 6.3.3-r2;
This issue affects Session Smart Conductor:
from 5.6.7 before 5.6.17,
from 6.0 before 6.0.8 (affected from 6.0.8),
from 6.1 before 6.1.12-lts,
from 6.2 before 6.2.8-lts,
from 6.3 before 6.3.3-r2;
This issue affects WAN Assurance Managed Routers:
from 5.6.7 before 5.6.17,
from 6.0 before 6.0.8 (affected from 6.0.8),
from 6.1 before 6.1.12-lts,
from 6.2 before 6.2.8-lts,
from 6.3 before 6.3.3-r2.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Juniper Networks | Session Smart Router | 5.6.7 < 5.6.17 | affected |
| Juniper Networks | Session Smart Router | 6.0 < 6.0.8 | unaffected |
| Juniper Networks | Session Smart Router | 6.1 < 6.1.12-lts | affected |
| Juniper Networks | Session Smart Router | 6.2 < 6.2.8-lts | affected |
| Juniper Networks | Session Smart Router | 6.3 < 6.3.3-r2 | affected |
| Juniper Networks | Session Smart Conductor | 5.6.7 < 5.6.17 | affected |
| Juniper Networks | Session Smart Conductor | 6.0 < 6.0.8 | unaffected |
| Juniper Networks | Session Smart Conductor | 6.1 < 6.1.12-lts | affected |
| Juniper Networks | Session Smart Conductor | 6.2 < 6.2.8-lts | affected |
| Juniper Networks | Session Smart Conductor | 6.3 < 6.3.3-r2 | affected |
| Juniper Networks | WAN Assurance Managed Router | 5.6.7 < 5.6.17 | affected |
| Juniper Networks | WAN Assurance Managed Router | 6.0 < 6.0.8 | unaffected |
| Juniper Networks | WAN Assurance Managed Router | 6.1 < 6.1.12-lts | affected |
| Juniper Networks | WAN Assurance Managed Router | 6.2 < 6.2.8-lts | affected |
| Juniper Networks | WAN Assurance Managed Router | 6.3 < 6.3.3-r2 | affected |
Weaknesses
- CWE-288: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Workarounds
There are no known workarounds for this issue.
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
- https://supportportal.juniper.net/
- https://support.juniper.net/support/eol/software/ssr/
- https://kb.juniper.net/JSA94663
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.