CVE-2025-52952

EPSS 0.28%
Veröffentlicht 11.07.2025 15:04:35
Zuletzt bearbeitet 26.01.2026 18:31:02
Erkennungen
Login

Junos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crash

An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards allows an unauthenticated adjacent attacker to send a malformed packet to the device, leading to an FPC crash and restart, resulting in a Denial of Service (DoS).

Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.

This issue affects Juniper Networks:
Junos OS:
  *  All versions before 22.2R3-S1,
  *  from 22.4 before 22.4R2.


This feature is not enabled by default.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 13 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 22.2

   Juniper ≫ 32x10ge Mpc4e Version -
   Juniper ≫ Mpc1 Version -
   Juniper ≫ Mpc1 Q Version -
   Juniper ≫ Mpc1e Version -
   Juniper ≫ Mpc1e Q Version -
   Juniper ≫ Mpc2 Version -
   Juniper ≫ Mpc2 Eq Version -
   Juniper ≫ Mpc2 Q Version -
   Juniper ≫ Mpc2e Version -
   Juniper ≫ Mpc2e Eq Version -
   Juniper ≫ Mpc2e Ng Version -
   Juniper ≫ Mpc2e Ng Q Version -
   Juniper ≫ Mpc2e P Version -
   Juniper ≫ Mpc2e Q Version -
   Juniper ≫ Mpc3e Version -
   Juniper ≫ Mpc3e-3d-ng Version -
   Juniper ≫ Mpc3e-3d-ng-q Version -
   Juniper ≫ Mpc6e Version -
   Juniper ≫ Mpc7e-10g Version -
   Juniper ≫ Mpc7e-mrate Version -
   Juniper ≫ Mpc8e Version -
   Juniper ≫ Mpc9e Version -
   Juniper ≫ Mx2008 Version -
   Juniper ≫ Mx2010 Version -
   Juniper ≫ Mx2020 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx960 Version -

Juniper ≫ Junos Version 22.2 Update -

Juniper ≫ Junos Version 22.2 Update r1

Juniper ≫ Junos Version 22.2 Update r1-s1

Juniper ≫ Junos Version 22.2 Update r1-s2

Juniper ≫ Junos Version 22.2 Update r2

Juniper ≫ Junos Version 22.2 Update r2-s1

Juniper ≫ Junos Version 22.2 Update r2-s2

Juniper ≫ Junos Version 22.2 Update r3

Juniper ≫ Junos Version 22.4 Update -

Juniper ≫ Junos Version 22.4 Update r1

Juniper ≫ Junos Version 22.4 Update r1-s1

Juniper ≫ Junos Version 22.4 Update r1-s2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.28%	0.19

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Juniper	7.1	0	0	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Green
Juniper	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://supportportal.juniper.net/JSA100058

Vendor Advisory

https://www.juniper.net/documentation/us/en/software/junos/network-mgmt/topics/topic-map/cfm-configuring.html

Product

https://nvd.nist.gov/vuln/detail/CVE-2025-52952

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-52952

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-52952

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-52952