CVE-2025-52954

Summary

A Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved allows a local, low-privileged user to gain root privileges, leading to a system compromise.

Any low-privileged user with the capability to send packets over the internal VRF can execute arbitrary Junos commands and modify the configuration, and thus compromise the system. 

This issue affects Junos OS Evolved: 

  • All versions before 22.2R3-S7-EVO, 
  • from 22.4 before 22.4R3-S7-EVO, 
  • from 23.2 before 23.2R2-S4-EVO, 
  • from 23.4 before 23.4R2-S5-EVO, 
  • from 24.2 before 24.2R2-S1-EVO
  • from 24.4 before 24.4R1-S2-EVO, 24.4R2-EVO.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OS Evolved0 < 22.2R3-S7-EVOaffected
Juniper NetworksJunos OS Evolved22.4 < 22.4R3-S7-EVOaffected
Juniper NetworksJunos OS Evolved23.2 < 23.2R2-S4-EVOaffected
Juniper NetworksJunos OS Evolved23.4 < 23.4R2-S5-EVOaffected
Juniper NetworksJunos OS Evolved24.2 < 24.2R2-S1-EVOaffected
Juniper NetworksJunos OS Evolved24.4 < 24.4R1-S2-EVO, 24.4R2-EVOaffected

Weaknesses

  • CWE-862: CWE-862 Missing Authorization

Workarounds

Use access lists or firewall filters to limit access to the CLI only from trusted hosts and administrators.

Grant shell and network permissions only to trusted users.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References