PT-2025-29257 · Juniper Networks · Junos+1

Published 2025-07-09 · Updated 2025-07-11 · CVE-2025-52988

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:X

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS versions 21.4 before 21.4R3-S8 Juniper Networks Junos OS versions 22.2 before 22.2R3-S6 Juniper Networks Junos OS versions 22.3 before 22.3R3-S3 Juniper Networks Junos OS versions 22.4 before 22.4R3-S6 Juniper Networks Junos OS versions 23.2 before 23.2R2-S1 Juniper Networks Junos OS versions 23.4 before 23.4R1-S2 Juniper Networks Junos OS versions 23.4R2 Juniper Networks Junos OS Evolved versions prior to 22.4R3-S6-EVO Juniper Networks Junos OS Evolved versions 23.2-EVO before 23.2R2-S1-EVO Juniper Networks Junos OS Evolved versions 23.4-EVO before 23.4R1-S2-EVO Juniper Networks Junos OS Evolved versions 23.4R2-EVO

Description: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists in the CLI of Juniper Networks Junos OS and Junos OS Evolved. This allows a high-privileged local attacker to escalate their privileges to root. The issue occurs when specifically crafted arguments are provided to the request system logout command, which are then executed as root on the shell, potentially leading to a complete device compromise.

Recommendations: Juniper Networks Junos OS versions prior to 21.2R3-S9: Upgrade to version 21.2R3-S9 or later. Juniper Networks Junos OS versions 21.4 before 21.4R3-S8: Upgrade to version 21.4R3-S8 or later. Juniper Networks Junos OS versions 22.2 before 22.2R3-S6: Upgrade to version 22.2R3-S6 or later. Juniper Networks Junos OS versions 22.3 before 22.3R3-S3: Upgrade to version 22.3R3-S3 or later. Juniper Networks Junos OS versions 22.4 before 22.4R3-S6: Upgrade to version 22.4R3-S6 or later. Juniper Networks Junos OS versions 23.2 before 23.2R2-S1: Upgrade to version 23.2R2-S1 or later. Juniper Networks Junos OS versions 23.4 before 23.4R1-S2: Upgrade to version 23.4R1-S2 or later. Juniper Networks Junos OS versions 23.4R2: No action is required. Juniper Networks Junos OS Evolved versions prior to 22.4R3-S6-EVO: Upgrade to version 22.4R3-S6-EVO or later. Juniper Networks Junos OS Evolved versions 23.2-EVO before 23.2R2-S1-EVO: Upgrade to version 23.2R2-S1-EVO or later. Juniper Networks Junos OS Evolved versions 23.4-EVO before 23.4R1-S2-EVO: Upgrade to version 23.4R1-S2-EVO or later. Juniper Networks Junos OS Evolved versions 23.4R2-EVO: No action is required.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-08765

CVE-2025-52988

Affected Products

Junos

Junos Evolved

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-52988 · Security Note
• https://supportportal.juniper.net/JSA100095 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52988 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08765 · Security Note
• https://twitter.com/CVEnew/status/1943700197768396914 · Twitter Post
• https://t.me/cvetracker/27574 · Telegram Post