PT-2025-41402 · Juniper Networks · Qfx5000 Series +2

Published 2025-10-09 · Updated 2025-10-09 · CVE-2025-59957

Positive Technologies · (AI Summary)

CVSS v3.1

6.8

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 21.4R3 Juniper Networks Junos OS versions 22.2 before 22.2R3-S3

Description An Origin Validation Error exists in a file within Juniper Networks Junos OS on EX4600 Series and QFX5000 Series. An unauthenticated attacker with physical access can create a backdoor, gaining complete control of the system. When a root password is not configured, an attacker can modify a specific file, adding configuration statements to the Junos configuration without visibility. This allows the addition of unauthorized users, IP addresses, and other configurations. The exploit persists across reboots and even zeroization. The indicator of compromise is a modified

/etc/config/<platform>-defaults[-flex].conf

file.

Recommendations For versions prior to 21.4R3, reinstall the system from physical media to restore a trusted initial configuration. For versions 22.2 before 22.2R3-S3, reinstall the system from physical media to restore a trusted initial configuration.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-59957

Affected Products

Ex4600 Series

Junos

Qfx5000 Series

References · 6

• https://supportportal.juniper.net/JSA103146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59957 · Security Note
• https://t.me/CVEtracker/34531 · Telegram Post
• https://supportportal.juniper.net/s/article/EX-QFX-Procedure-to-format-install-QFX5K-device-using-a-USB · Note
• https://support.juniper.net/support/requesting-support · Note
• https://twitter.com/CVEnew/status/1976328961727861041 · Twitter Post