CVE-2025-30652
Published: Apr 9, 2025
Modified: Apr 9, 2025
CVSS v3.1
5.5
Description
An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service (DoS). When asregex-optimized is configured and a specific "show route as-path" CLI command is executed, the rpd crashes and restarts. Repeated execution of this command will cause a sustained DoS condition. This issue affects Junos OS: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S10, * from 22.2 before 22.2R3-S6, * from 22.4 before 22.4R3-S6, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S4, * from 24.2 before 24.2R2. and Junos OS Evolved: * All versions before 21.2R3-S9-EVO, * from 21.4-EVO before 21.4R3-S10-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S6-EVO, * from 23.2-EVO before 23.2R2-S3-EVO, * from 23.4-EVO before 23.4R2-S4-EVO, * from 24.2-EVO before 24.2R2-EVO.
| Vendor | Product | Versions |
|---|---|---|
Juniper Networks | Junos OS | affected 0 - < 21.2R3-S9affected 21.4 - < 21.4R3-S10affected 22.2 - < 22.2R3-S6affected 22.4 - < 22.4R3-S6affected 23.2 - < 23.2R2-S3+2 more versions |
Juniper Networks | Junos OS Evolved | affected 0 - < 21.2R3-S9-EVOaffected 21.4-EVO - < 21.4R3-S10-EVOaffected 22.2-EVO - < 22.2R3-S6-EVOaffected 22.4-EVO - < 22.4R3-S6-EVOaffected 23.2-EVO - < 23.2R2-S3-EVO+2 more versions |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now