CVE-2025-21590

Junos OS: An local attacker with shell access can execute arbitrary code

State: Published
Severity: 6.7 Medium
Published: Mar 12, 2025
Updated: Feb 26, 2026
Reserved: Dec 26, 2024

Description

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device.

A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device. This issue is not exploitable from the Junos CLI. This issue affects Junos OS:

* All versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R1-S2, 24.2R2.

Scores

CVSS	Score	Vector	Source
4.0	6.7 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N	juniper
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N	juniper

Weaknesses

CWE-653 Improper Isolation or Compartmentalization

Affected Products

Product	Versions
Junos OSJuniper Networks	before 21.2R3-S9Affected 21.4 to before 21.4R3-S10Affected 22.2 to before 22.2R3-S6Affected 22.4 to before 22.4R3-S6Affected 23.2 to before 23.2R2-S3Affected 23.4 to before 23.4R2-S4Affected 24.2 to before 24.2R1-S2, 24.2R2Affected

References

https://supportportal.juniper.net/JSA93446vendor-advisory
https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routersthird-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21590government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.