Juniper Junos OS CVE-2025-30652 Local DoS Vulnerability Advisory

Key Information Vulnerability ID: CVE-2025-30652 Affected Products: All versions of Junos OS and Junos OS Evolved Severity: Medium CVSS Score: - v3.1: 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) - v4.0: 6.8 (AV:L/AC:L/ATN:PR:L/UI:N/V:C/N/I:N/VAH:SC:N/SI:S/SA:L/R:A) Issue Description Vulnerability Type: Improper handling of exceptional conditions in the routing protocol daemon (rpd) allows a local, low-privileged attacker to trigger a denial-of-service (DoS) by executing specific CLI commands. Trigger Condition: When the configuration is enabled, executing the specific CLI command causes rpd to crash and restart. Repeated execution of this command leads to a sustained DoS condition. Affected Versions Junos OS: - All versions prior to 21.2R3-S9 - From 21.4R1 to 21.4R3-S10 - From 22.2R1 to 22.2R3-S6 - From 22.4R1 to 22.4R3-S6 - From 23.2R1 to 23.2R2-S3 - From 23.4R1 to 23.4R2-S4 - From 24.2R1 to 24.2R2 Junos OS Evolved: - All versions prior to 21.2R3-59-EVO - From 21.4-EVO to 21.4R3-510-EVO - From 22.2-EVO to 22.2R3-56-EVO - From 22.4-EVO to 22.4R3-56-EVO - From 23.2-EVO to 23.2R2-55-EVO - From 23.4-EVO to 23.4R2-54-EVO - From 24.2-EVO to 24.2R2-EVO Exposure-Required Configuration Solution The following software versions have been released to address this issue: - Junos OS: 21.2R3-S9, 22.2R3-S10, 22.2R3-S6, 22.4R3-S6, 23.2R2-S3, 23.4R2-S4, 24.2R2, 24.4R1 and later versions - Junos OS Evolved: 21.2R3-59-EVO, 21.4R3-510-EVO, 22.2R3-56-EVO, 22.4R3-56-EVO, 23.2R2-55-EVO, 23.4R2-54-EVO, 24.2R2-EVO, 24.4R1-EVO and later versions Mitigation Use access lists or firewall filters to restrict CLI access to trusted hosts and administrators only. Disable execution of the command via CLI authorization.

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS CVE-2025-30652 Local DoS Vulnerability Advisory