6.8

CVE-2025-52989

An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.



A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.




This issue affects:

 Junos OS: 



  *  all versions before 22.2R3-S7,
  *  22.4 versions before 22.4R3-S7,
  *  23.2 versions before 23.2R2-S4,
  *  23.4 versions before 23.4R2-S4,
  *  24.2 versions before 24.2R2-S1,
  *  24.4 versions before 24.4R1-S2, 24.4R2;




Junos OS Evolved:



  *  all versions before 22.4R3-S7-EVO,
  *  23.2-EVO versions before 23.2R2-S4-EVO,
  *  23.4-EVO versions before 23.4R2-S5-EVO, 
  *  24.2-EVO versions before 24.2R2-S1-EVO



  *  24.4-EVO versions before 24.4R2-EVO.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version < 22.2
Juniper ≫ Junos Version22.2 Update-
Juniper ≫ Junos Version22.2 Updater1
Juniper ≫ Junos Version22.2 Updater1-s1
Juniper ≫ Junos Version22.2 Updater1-s2
Juniper ≫ Junos Version22.2 Updater2
Juniper ≫ Junos Version22.2 Updater2-s1
Juniper ≫ Junos Version22.2 Updater2-s2
Juniper ≫ Junos Version22.2 Updater3
Juniper ≫ Junos Version22.2 Updater3-s1
Juniper ≫ Junos Version22.2 Updater3-s2
Juniper ≫ Junos Version22.2 Updater3-s3
Juniper ≫ Junos Version22.2 Updater3-s4
Juniper ≫ Junos Version22.2 Updater3-s5
Juniper ≫ Junos Version22.2 Updater3-s6
Juniper ≫ Junos Version22.4 Update-
Juniper ≫ Junos Version22.4 Updater1
Juniper ≫ Junos Version22.4 Updater1-s1
Juniper ≫ Junos Version22.4 Updater1-s2
Juniper ≫ Junos Version22.4 Updater2
Juniper ≫ Junos Version22.4 Updater2-s1
Juniper ≫ Junos Version22.4 Updater2-s2
Juniper ≫ Junos Version22.4 Updater3
Juniper ≫ Junos Version22.4 Updater3-s1
Juniper ≫ Junos Version22.4 Updater3-s2
Juniper ≫ Junos Version22.4 Updater3-s3
Juniper ≫ Junos Version22.4 Updater3-s4
Juniper ≫ Junos Version22.4 Updater3-s5
Juniper ≫ Junos Version22.4 Updater3-s6
Juniper ≫ Junos Version23.2 Update-
Juniper ≫ Junos Version23.2 Updater1
Juniper ≫ Junos Version23.2 Updater1-s1
Juniper ≫ Junos Version23.2 Updater1-s2
Juniper ≫ Junos Version23.2 Updater2
Juniper ≫ Junos Version23.2 Updater2-s1
Juniper ≫ Junos Version23.2 Updater2-s2
Juniper ≫ Junos Version23.2 Updater2-s3
Juniper ≫ Junos Version23.4 Update-
Juniper ≫ Junos Version23.4 Updater1
Juniper ≫ Junos Version23.4 Updater1-s1
Juniper ≫ Junos Version23.4 Updater1-s2
Juniper ≫ Junos Version23.4 Updater2
Juniper ≫ Junos Version23.4 Updater2-s1
Juniper ≫ Junos Version23.4 Updater2-s2
Juniper ≫ Junos Version23.4 Updater2-s3
Juniper ≫ Junos Version24.2 Update-
Juniper ≫ Junos Version24.2 Updater1
Juniper ≫ Junos Version24.2 Updater1-s1
Juniper ≫ Junos Version24.2 Updater1-s2
Juniper ≫ Junos Version24.2 Updater2
Juniper ≫ Junos Version24.4 Update-
Juniper ≫ Junos Version24.4 Updater1
Juniper ≫ Junos Version24.4 Updater2
Juniper ≫ Junos Os Evolved Version < 22.4
Juniper ≫ Junos Os Evolved Version22.4 Update-
Juniper ≫ Junos Os Evolved Version22.4 Updater1
Juniper ≫ Junos Os Evolved Version22.4 Updater1-s1
Juniper ≫ Junos Os Evolved Version22.4 Updater1-s2
Juniper ≫ Junos Os Evolved Version22.4 Updater2
Juniper ≫ Junos Os Evolved Version22.4 Updater2-s1
Juniper ≫ Junos Os Evolved Version22.4 Updater2-s2
Juniper ≫ Junos Os Evolved Version22.4 Updater3
Juniper ≫ Junos Os Evolved Version22.4 Updater3-s1
Juniper ≫ Junos Os Evolved Version22.4 Updater3-s2
Juniper ≫ Junos Os Evolved Version22.4 Updater3-s3
Juniper ≫ Junos Os Evolved Version22.4 Updater3-s4
Juniper ≫ Junos Os Evolved Version22.4 Updater3-s5
Juniper ≫ Junos Os Evolved Version22.4 Updater3-s6
Juniper ≫ Junos Os Evolved Version23.2 Update-
Juniper ≫ Junos Os Evolved Version23.2 Updater1
Juniper ≫ Junos Os Evolved Version23.2 Updater1-s1
Juniper ≫ Junos Os Evolved Version23.2 Updater1-s2
Juniper ≫ Junos Os Evolved Version23.2 Updater2
Juniper ≫ Junos Os Evolved Version23.2 Updater2-s1
Juniper ≫ Junos Os Evolved Version23.2 Updater2-s2
Juniper ≫ Junos Os Evolved Version23.2 Updater2-s3
Juniper ≫ Junos Os Evolved Version23.4 Update-
Juniper ≫ Junos Os Evolved Version23.4 Updater1
Juniper ≫ Junos Os Evolved Version23.4 Updater1-s1
Juniper ≫ Junos Os Evolved Version23.4 Updater1-s2
Juniper ≫ Junos Os Evolved Version23.4 Updater2
Juniper ≫ Junos Os Evolved Version23.4 Updater2-s1
Juniper ≫ Junos Os Evolved Version23.4 Updater2-s2
Juniper ≫ Junos Os Evolved Version23.4 Updater2-s3
Juniper ≫ Junos Os Evolved Version23.4 Updater2-s4
Juniper ≫ Junos Os Evolved Version24.2 Update-
Juniper ≫ Junos Os Evolved Version24.2 Updater1
Juniper ≫ Junos Os Evolved Version24.2 Updater1-s2
Juniper ≫ Junos Os Evolved Version24.2 Updater2
Juniper ≫ Junos Os Evolved Version24.4 Update-
Juniper ≫ Junos Os Evolved Version24.4 Updater1
Juniper ≫ Junos Os Evolved Version24.4 Updater1-s2
Juniper ≫ Junos Os Evolved Version24.4 Updater1-s3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.035
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
sirt@juniper.net 6.8 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:M/U:X
sirt@juniper.net 5.1 0.8 4.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
CWE-140 Improper Neutralization of Delimiters

The product does not neutralize or incorrectly neutralizes delimiters.