CVE-2025-30650
8.4
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:C/RE:M/U:AmberShow more
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:C/RE:M/U:AmberShow less
Source: sirt@juniper.net (Secondary)
Description
A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.
This issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:
* MPC7, MPC8, MPC9, MPC10, MPC11
* LC2101, LC2103
* LC480, LC4800, LC9600
* MX304 (built-in FPC)
* MX-SPC3
* SRX5K-SPC3
* EX9200-40XS
* FPC3-PTX-U2, FPC3-PTX-U3
* FPC3-SFF-PTX
* LC1101, LC1102, LC1104, LC1105
This issue affects Junos OS:
* all versions before 22.4R3-S8,
* from 23.2 before 23.2R2-S6,
* from 23.4 before 23.4R2-S6,
* from 24.2 before 24.2R2-S3,
* from 24.4 before 24.4R2,
* from 25.2 before 25.2R2.
Affected (45)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 22.4 |
| Running on/with | Platform Versions |
|---|---|
Juniper Ex9200 | All versions |
Juniper Fpc3 Ptx U2 | All versions |
Juniper Fpc3 Ptx U3 | All versions |
Juniper Fpc3 Sff Ptx | All versions |
Juniper Lc1101 | All versions |
Juniper Lc1102 | All versions |
Juniper Lc1104 | All versions |
Juniper Lc1105 | All versions |
Juniper Lc2101 | All versions |
Juniper Lc2103 | All versions |
Juniper Lc480 | All versions |
Juniper Lc4800 | All versions |
Juniper Lc9600 | All versions |
Juniper Mpc10 | All versions |
Juniper Mpc11 | All versions |
Juniper Mpc7e 10g | All versions |
Juniper Mpc8e | All versions |
Juniper Mpc9e | All versions |
Juniper Mx Spc3 | All versions |
Juniper Mx304 | All versions |
Juniper Srx5k Spc3 | All versions |
References (2)
Source: sirt@juniper.net
Third Party Advisory
Timeline
No history available yet.