CVE-2025-52961: junos os evolved 23.4, 24.2, 24.4; +1 more affected products

Affected technology

junos os evolved · 23.2 · update r1
juniper

junos os evolved · 23.2 · update r1-s1
juniper

junos os evolved · 23.2 · update r1-s2
juniper

junos os evolved · 23.2 · update r2
juniper

junos os evolved · 23.2 · update r2-s1
juniper

junos os evolved · 23.2 · update r2-s2
juniper

junos os evolved · 23.2 · update r2-s3
juniper

junos os evolved · 23.4
juniper

junos os evolved · 23.4 · update r1
juniper

junos os evolved · 23.4 · update r1-s1
juniper

junos os evolved · 23.4 · update r1-s2
juniper

junos os evolved · 23.4 · update r2
juniper

junos os evolved · 23.4 · update r2-s1
juniper

junos os evolved · 23.4 · update r2-s2
juniper

junos os evolved · 23.4 · update r2-s3
juniper

junos os evolved · 24.2
juniper

junos os evolved · 24.2 · update r1
juniper

junos os evolved · 24.2 · update r1-s2
juniper

junos os evolved · 24.4
juniper

junos os evolved · 24.4 · update r1
juniper

junos os evolved · 24.4 · update r2
juniper

Junos OS Evolved · 23.2R1-EVO to before 23.2R2-S4-EVO, 23.4-EVO to before 23.4R2-S4-EVO, 24.2-EVO to before 24.2R2-EVO, 24.4-EVO to before 24.4R1-S2-EVO, 24.4R2-EVO
Juniper Networks

Component: cfmman, cfmd

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An unauthenticated, adjacent attacker can cause a Denial-of-Service (DoS). Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality and integrity impact as none; availability impact as high.