PT-2025-1067 · Juniper Networks · Junos+1

Published 2025-01-08 · Updated 2026-01-26 · CVE-2025-21602

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:N/R:A/V:C/RE:M/U:Green

Name of the Vulnerable Software and Affected Versions Junos OS versions 21.4 through 21.4R3-S9 Junos OS versions 22.2 through 22.2R3-S5 Junos OS versions 22.3 through 22.3R3-S4 Junos OS versions 22.4 through 22.4R3-S5 Junos OS versions 23.2 through 23.2R2-S3 Junos OS versions 23.4 through 23.4R2-S3 Junos OS versions 24.2 through 24.2R1-S2, 24.2R2 Junos OS Evolved versions 21.4 through 21.4R3-S9-EVO Junos OS Evolved versions 22.2 through 22.2R3-S5-EVO Junos OS Evolved versions 22.3 through 22.3R3-S4-EVO Junos OS Evolved versions 22.4 through 22.4R3-S5-EVO Junos OS Evolved versions 23.2 through 23.2R2-S3-EVO Junos OS Evolved versions 23.4 through 23.4R2-S3-EVO Junos OS Evolved versions 24.2 through 24.2R1-S2-EVO, 24.2R2-EVO

Description The issue is related to an improper handling of exceptional conditions in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This allows an unauthenticated adjacent attacker to send a specific BGP update packet to cause rpd to crash and restart, resulting in a Denial of Service (DoS). The continuous receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects both iBGP and eBGP, and both IPv4 and IPv6 are affected by this vulnerability.

Recommendations For Junos OS versions 21.4 through 21.4R3-S9, update to version 21.4R3-S9 or later. For Junos OS versions 22.2 through 22.2R3-S5, update to version 22.2R3-S5 or later. For Junos OS versions 22.3 through 22.3R3-S4, update to version 22.3R3-S4 or later. For Junos OS versions 22.4 through 22.4R3-S5, update to version 22.4R3-S5 or later. For Junos OS versions 23.2 through 23.2R2-S3, update to version 23.2R2-S3 or later. For Junos OS versions 23.4 through 23.4R2-S3, update to version 23.4R2-S3 or later. For Junos OS versions 24.2 through 24.2R1-S2, 24.2R2, update to a version later than 24.2R2. For Junos OS Evolved versions 21.4 through 21.4R3-S9-EVO, update to version 21.4R3-S9-EVO or later. For Junos OS Evolved versions 22.2 through 22.2R3-S5-EVO, update to version 22.2R3-S5-EVO or later. For Junos OS Evolved versions 22.3 through 22.3R3-S4-EVO, update to version 22.3R3-S4-EVO or later. For Junos OS Evolved versions 22.4 through 22.4R3-S5-EVO, update to version 22.4R3-S5-EVO or later. For Junos OS Evolved versions 23.2 through 23.2R2-S3-EVO, update to version 23.2R2-S3-EVO or later. For Junos OS Evolved versions 23.4 through 23.4R2-S3-EVO, update to version 23.4R2-S3-EVO or later. For Junos OS Evolved versions 24.2 through 24.2R1-S2-EVO, 24.2R2-EVO, update to a version later than 24.2R2-EVO.

Fix

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

BDU:2025-00301

CVE-2025-21602

Affected Products

Junos

Junos Evolved

References · 8

• https://supportportal.juniper.net/JSA92872 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21602 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00301 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21602 · Security Note
• https://twitter.com/CVEnew/status/1877403147091550515 · Twitter Post
• https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-specially-crafted-BGP-update-packet-causes-RPD-crash-CVE-2025-21602?language=en_US · Note
• https://t.me/cvedetector/14873 · Telegram Post
• https://t.me/cveNotify/149919 · Telegram Post