CVE-2025-13914

Name of the Vulnerable Software and Affected Versions Juniper Networks Apstra versions prior to 6.1.1

Description A Key Exchange without Entity Authentication issue exists in the SSH implementation of Juniper Networks Apstra. This allows an unauthenticated, man-in-the-middle (MITM) attacker to impersonate managed devices. Insufficient SSH host key validation enables an attacker to perform a MITM attack on SSH connections from Apstra to managed devices, potentially capturing user credentials.

Recommendations Update to version 6.1.1 or later.