PT-2025-29246 · Juniper Networks · Mpc1+4

Published 2025-07-09 · Updated 2025-07-11 · CVE-2025-52952

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Green

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 22.2R3-S1 Juniper Networks Junos OS versions 22.4 through 22.4R2

Description: An out-of-bounds write vulnerability exists in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards. An unauthenticated adjacent attacker can send a malformed packet to the device, leading to an FPC crash and restart, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This feature is not enabled by default.

Recommendations: Update to Junos OS version 22.2R3-S1 or later. Update to Junos OS version 22.4R2 or later.

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-08739

CVE-2025-52952

Affected Products

Junos

Mpc-Builtin

Mpc1

Mpc9

Mx Series

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-52952 · Security Note
• https://supportportal.juniper.net/JSA100058 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08739 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52952 · Vendor Advisory
• https://juniper.net/documentation/us/en/software/junos/network-mgmt/topics/topic-map/cfm-configuring.html · Note
• https://twitter.com/VulmonFeeds/status/1943717467450147146 · Twitter Post
• https://twitter.com/CVEnew/status/1943700209646571993 · Twitter Post
• https://t.me/cvetracker/27559 · Telegram Post