CVE-2025-52954
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-11

Last updated on: 2025-07-15

Assigner: Juniper Networks, Inc.

Description
A Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved allows a local, low-privileged user to gain root privileges, leading to a system compromise. Any low-privileged user with the capability to send packets over the internal VRF can execute arbitrary Junos commands and modify the configuration, and thus compromise the system.  This issue affects Junos OS Evolved:  * All versions before 22.2R3-S7-EVO,  * from 22.4 before 22.4R3-S7-EVO,  * from 23.2 before 23.2R2-S4-EVO,  * from 23.4 before 23.4R2-S5-EVO,  * from 24.2 before 24.2R2-S1-EVO * from 24.4 before 24.4R1-S2-EVO, 24.4R2-EVO.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-11
Last Modified
2025-07-15
Generated
2026-05-06
AI Q&A
2025-07-11
EPSS Evaluated
2026-05-05
NVD
CVE-2025-52954
EUVD
EUVD-2025-21161
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
juniper juniper_networks_junos_os_evolved *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a Missing Authorization issue in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved. It allows a local, low-privileged user who can send packets over the internal VRF to execute arbitrary Junos commands and modify the system configuration, effectively gaining root privileges and compromising the system.


How can this vulnerability impact me? :

The vulnerability can lead to a complete system compromise by allowing a low-privileged local user to escalate their privileges to root. This means unauthorized users could execute arbitrary commands and change system configurations, potentially disrupting operations, exposing sensitive data, or causing other security breaches.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart