PT-2025-29236 · Juniper Networks · Acx5048+8

Published

2025-07-09

·

Updated

2025-07-11

·

CVE-2025-52947

CVSS v4.0

7.1

High

VectorAV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:A/V:X/RE:M/U:Green
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on ACX1000, ACX1100, ACX2000, ACX2100, ACX2200, ACX4000, ACX5048, and ACX5096 versions prior to 21.2R3-S9
Description: An improper handling of exceptional conditions exists in the route processing of Junos OS on specific ACX Series platforms. This issue allows an attacker to crash the Forwarding Engine Board (FEB) by repeatedly bringing an interface up and down, resulting in a Denial of Service (DoS). The issue occurs when the primary path port of a Layer 2 circuit using Interior Gateway Protocol (IGP) goes down while 'hot-standby' mode is configured for the circuit.
Recommendations: Upgrade to Junos OS version 21.2R3-S9 or later on ACX1000 devices. Upgrade to Junos OS version 21.2R3-S9 or later on ACX1100 devices. Upgrade to Junos OS version 21.2R3-S9 or later on ACX2000 devices. Upgrade to Junos OS version 21.2R3-S9 or later on ACX2100 devices. Upgrade to Junos OS version 21.2R3-S9 or later on ACX2200 devices. Upgrade to Junos OS version 21.2R3-S9 or later on ACX4000 devices. Upgrade to Junos OS version 21.2R3-S9 or later on ACX5048 devices. Upgrade to Junos OS version 21.2R3-S9 or later on ACX5096 devices.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

BDU:2025-08762
CVE-2025-52947

Affected Products

Cx1000
Acx1100
Ac2000
Ac2100
Acx2200
Acx4000
Acx5048
Acx5096
Junos