Juniper Junos OS Evolved Local Privilege Escalation via VRF (CVE-2025-52954)

Key Information Vulnerability Overview CVE ID: CVE-2025-52954 Title: 2025-07 Security Bulletin: Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system Affected Products Affected Product: Junos OS Evolved Severity Severity Level: High CVSS Score: - CVSS v3.1: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) - CVSS v4.0: 8.5 (AV:L/AC:L/ATN:PR/L/UI:N/V:C/H/I:H/A:H/SC:N/SI:N/SA:N) Description Vulnerability Type: Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved. Impact: Allows a local low-privileged user to gain root privileges, leading to system compromise. Any low-privileged user who can send packets through the internal VRF can execute arbitrary Junos commands and modify the configuration, thereby endangering the system. Solution Fixed Versions: - Junos OS Evolved: 22.2R3-S7-EVO, 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S5-EVO, 24.2R2-S1-EVO, 24.4R1-S2-EVO, 24.4R2-EVO, 25.2R1-EVO and all subsequent releases. Mitigation Use access lists or firewall filters to restrict CLI access to trusted hosts and administrators only. Grant shell and network access only to trusted users. Related Links KB16613: Overview of the Juniper Networks SIRT Quarterly Security Bulletin Publication Process KB16765: In which releases are vulnerabilities fixed? KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories Report a Security Vulnerability - How to Contact the Juniper Networks Security Incident Response Team CVE Record

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS Evolved Local Privilege Escalation via VRF (CVE-2025-52954)