CVE-2025-59975
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-09

Last updated on: 2025-10-14

Assigner: Juniper Networks, Inc.

Description
An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device with inbound API calls to consume all resources on the system, leading to a Denial of Service (DoS). After continuously flooding the system with inbound connection requests, all available file handles become consumed, blocking access to the system via SSH and the web user interface (WebUI), resulting in a management interface DoS. A manual reboot of the system is required to restore functionality. This issue affects Junos Space: * all versions before 22.2R1 Patch V3, * from 23.1 before 23.1R1 Patch V3.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-09
Last Modified
2025-10-14
Generated
2026-05-06
AI Q&A
2025-10-09
EPSS Evaluated
2026-05-05
NVD
CVE-2025-59975
EUVD
EUVD-2025-33391
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
juniper junos_space *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is an Uncontrolled Resource Consumption issue in the HTTP daemon (httpd) of Juniper Networks Junos Space. An unauthenticated attacker can flood the device with inbound API calls, consuming all system resources. This leads to exhaustion of file handles, which blocks access to the system via SSH and the web user interface, causing a Denial of Service (DoS). The system requires a manual reboot to restore functionality.


How can this vulnerability impact me? :

The impact of this vulnerability is a Denial of Service (DoS) on the management interfaces of the affected device. An attacker can flood the system with API calls, consuming all available file handles and preventing access through SSH and the web user interface. This disrupts management and operation of the device until it is manually rebooted.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart