6.7

CVE-2025-21590

Warnung
Medienbericht

Junos OS: An local attacker with shell access can execute arbitrary code

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device.

A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device.
This issue is not exploitable from the Junos CLI.
This issue affects Junos OS: 



  *  All versions before 21.2R3-S9,
  *  21.4 versions before 21.4R3-S10, 
  *  22.2 versions before 22.2R3-S6, 
  *  22.4 versions before 22.4R3-S6, 
  *  23.2 versions before 23.2R2-S3, 
  *  23.4 versions before 23.4R2-S4,
  *  24.2 versions before 24.2R1-S2, 24.2R2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version < 21.2
Juniper ≫ Junos Version 21.2 Update -
Juniper ≫ Junos Version 21.2 Update r1
Juniper ≫ Junos Version 21.2 Update r1-s1
Juniper ≫ Junos Version 21.2 Update r1-s2
Juniper ≫ Junos Version 21.2 Update r2
Juniper ≫ Junos Version 21.2 Update r2-s1
Juniper ≫ Junos Version 21.2 Update r2-s2
Juniper ≫ Junos Version 21.2 Update r3
Juniper ≫ Junos Version 21.2 Update r3-s1
Juniper ≫ Junos Version 21.2 Update r3-s2
Juniper ≫ Junos Version 21.2 Update r3-s3
Juniper ≫ Junos Version 21.2 Update r3-s4
Juniper ≫ Junos Version 21.2 Update r3-s5
Juniper ≫ Junos Version 21.2 Update r3-s6
Juniper ≫ Junos Version 21.2 Update r3-s7
Juniper ≫ Junos Version 21.2 Update r3-s8
Juniper ≫ Junos Version 21.4 Update -
Juniper ≫ Junos Version 21.4 Update r1
Juniper ≫ Junos Version 21.4 Update r1-s1
Juniper ≫ Junos Version 21.4 Update r1-s2
Juniper ≫ Junos Version 21.4 Update r2
Juniper ≫ Junos Version 21.4 Update r2-s1
Juniper ≫ Junos Version 21.4 Update r2-s2
Juniper ≫ Junos Version 21.4 Update r3
Juniper ≫ Junos Version 21.4 Update r3-s1
Juniper ≫ Junos Version 21.4 Update r3-s2
Juniper ≫ Junos Version 21.4 Update r3-s3
Juniper ≫ Junos Version 21.4 Update r3-s4
Juniper ≫ Junos Version 21.4 Update r3-s5
Juniper ≫ Junos Version 21.4 Update r3-s6
Juniper ≫ Junos Version 21.4 Update r3-s7
Juniper ≫ Junos Version 21.4 Update r3-s8
Juniper ≫ Junos Version 21.4 Update r3-s9
Juniper ≫ Junos Version 22.2 Update -
Juniper ≫ Junos Version 22.2 Update r1
Juniper ≫ Junos Version 22.2 Update r1-s1
Juniper ≫ Junos Version 22.2 Update r1-s2
Juniper ≫ Junos Version 22.2 Update r2
Juniper ≫ Junos Version 22.2 Update r2-s1
Juniper ≫ Junos Version 22.2 Update r2-s2
Juniper ≫ Junos Version 22.2 Update r3
Juniper ≫ Junos Version 22.2 Update r3-s1
Juniper ≫ Junos Version 22.2 Update r3-s2
Juniper ≫ Junos Version 22.2 Update r3-s3
Juniper ≫ Junos Version 22.2 Update r3-s4
Juniper ≫ Junos Version 22.2 Update r3-s5
Juniper ≫ Junos Version 22.4 Update -
Juniper ≫ Junos Version 22.4 Update r1
Juniper ≫ Junos Version 22.4 Update r1-s1
Juniper ≫ Junos Version 22.4 Update r1-s2
Juniper ≫ Junos Version 22.4 Update r2
Juniper ≫ Junos Version 22.4 Update r2-s1
Juniper ≫ Junos Version 22.4 Update r2-s2
Juniper ≫ Junos Version 22.4 Update r3
Juniper ≫ Junos Version 22.4 Update r3-s1
Juniper ≫ Junos Version 22.4 Update r3-s2
Juniper ≫ Junos Version 22.4 Update r3-s3
Juniper ≫ Junos Version 22.4 Update r3-s4
Juniper ≫ Junos Version 22.4 Update r3-s5
Juniper ≫ Junos Version 23.2 Update -
Juniper ≫ Junos Version 23.2 Update r1
Juniper ≫ Junos Version 23.2 Update r1-s1
Juniper ≫ Junos Version 23.2 Update r1-s2
Juniper ≫ Junos Version 23.2 Update r2
Juniper ≫ Junos Version 23.2 Update r2-s1
Juniper ≫ Junos Version 23.2 Update r2-s2
Juniper ≫ Junos Version 23.4 Update -
Juniper ≫ Junos Version 23.4 Update r1
Juniper ≫ Junos Version 23.4 Update r1-s1
Juniper ≫ Junos Version 23.4 Update r1-s2
Juniper ≫ Junos Version 23.4 Update r2
Juniper ≫ Junos Version 23.4 Update r2-s1
Juniper ≫ Junos Version 23.4 Update r2-s2
Juniper ≫ Junos Version 23.4 Update r2-s3
Juniper ≫ Junos Version 24.2 Update -
Juniper ≫ Junos Version 24.2 Update r1
Juniper ≫ Junos Version 24.2 Update r1-s1
Juniper ≫ Junos Version 24.2 Update r2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login

13.03.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

Schwachstelle

Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.72% 0.752
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Juniper 6.7 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Juniper 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CWE-653 Improper Isolation or Compartmentalization

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
09.08.2025 11:36
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers
Third Party Advisory
https://supportportal.juniper.net/JSA93446
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21590
US Government Resource