PT-2025-41409 · Juniper Networks · Junos Space

Published 2025-10-09 · Updated 2025-12-23 · CVE-2025-59975

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:X

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 22.2R1 Patch V3 Juniper Networks Junos Space versions 23.1 before 23.1R1 Patch V3

Description An Uncontrolled Resource Consumption issue exists in the HTTP daemon (httpd) of Juniper Networks Junos Space. An unauthenticated network-based attacker can flood the system with inbound API calls, leading to resource exhaustion and a Denial of Service (DoS). This resource consumption specifically involves exhausting all available file handles, blocking access via SSH and the web user interface (WebUI). A manual reboot of the system is required to restore functionality. The affected component is the HTTP daemon. The API calls are used to trigger the resource consumption.

Recommendations Update to Junos Space 22.2R1 Patch V3 or later. Update to Junos Space 23.1R1 Patch V3 or later.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-59975

Affected Products

Junos Space

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-59975 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59975 · Vendor Advisory
• https://supportportal.juniper.net/JSA103172 · Vendor Advisory
• https://twitter.com/CVEnew/status/1976328950541586798 · Twitter Post
• https://twitter.com/CveFindCom/status/1976319175862726827 · Twitter Post
• https://t.me/CVEtracker/34538 · Telegram Post
• https://twitter.com/ZeroPathLabs/status/1976336226861879298 · Twitter Post
• https://twitter.com/CveTodo/status/1976328881440165918 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1976338506659115424 · Twitter Post