CVE-2025-52983

Junos OS: After removing ssh public key authentication root can still log in

State: Published
Severity: 8.6 High
Published: Jul 11, 2025
Updated: Feb 26, 2026
Reserved: Jun 23, 2025

Description

A UI Discrepancy for Security Feature

vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device.

On VM Host Routing Engines (RE), even if the configured public key for root has been removed, remote users which are in possession of the corresponding private key can still log in as root. This issue affects Junos OS:

* all versions before 22.2R3-S7, * 22.4 versions before 22.4R3-S5, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S3, * 24.2 versions before 24.2R1-S2, 24.2R2.

Scores

CVSS	Score	Vector	Source
4.0	8.6 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/R:U/RE:M	juniper
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	juniper

Weaknesses

CWE-446 UI Discrepancy for Security Feature

Affected Products

Product	Versions
Junos OSJuniper Networks	before 22.2R3-S7Affected 22.4 to before 22.4R3-S5Affected 23.2 to before 23.2R2-S3Affected 23.4 to before 23.4R2-S3Affected 24.2 to before 24.2R1-S2, 24.2R2Affected

References

https://supportportal.juniper.net/JSA100089vendor-advisory
https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade/topics/topic-map/vm-host-overview.html#id-routing-engines-with-vm-host-supporttechnical-description

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.