CVE-2025-60004: junos 24.4; +3 more affected products

Affected technology

junos · 23.4 · update r2-s3
juniper

junos · 23.4 · update r2-s4
juniper

junos · 24.2 · update r2
juniper

junos · 24.4
juniper

junos · 24.4 · update r1
juniper

junos · 24.4 · update r1-s2
juniper

junos · 24.4 · update r2
juniper

junos os evolved · 23.4 · update r2-s2
juniper

junos os evolved · 23.4 · update r2-s3
juniper

junos os evolved · 23.4 · update r2-s4
juniper

junos os evolved · 24.2 · update r2
juniper

junos os evolved · 24.4
juniper

junos os evolved · 24.4 · update r1
juniper

junos os evolved · 24.4 · update r1-s2
juniper

junos os evolved · 24.4 · update r2
juniper

Junos OS · 23.4R2-S3 to before 23.4R2-S5, 24.2R2 to before 24.2R2-S1, 24.4R1 to before 24.4R1-S3, 24.4R2
Juniper Networks

Junos OS Evolved · 23.4R2-S2-EVO to before 23.4R2-S5-EVO, 24.2R2-EVO to before 24.2R2-S1-EVO, 24.4R1-EVO to before 24.4R1-S3-EVO, 24.4R2-EVO
Juniper Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated, network-based attacker can cause a Denial-Of-Service (DoS). Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as none; availability impact as high.