VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 9, 2025· Updated Jun 17, 2026

CVE-2025-21601

CVE-2025-21601

Description

An Improper Following of Specification by Caller vulnerability in web management (J-Web, Captive Portal, 802.1X, Juniper Secure Connect (JSC) of Juniper Networks Junos OS on SRX Series, EX Series, MX240, MX480, MX960, QFX5120 Series, allows an unauthenticated, network-based attacker, sending genuine traffic targeted to the device to cause the CPU to climb until the device becomes unresponsive.

Continuous receipt of these packets will create a sustained Denial of Service (DoS) condition.

This issue affects Junos OS:

  • All versions before 21.4R3-S9,
  • from 22.2 before 22.2R3-S5,
  • from 22.4 before 22.4R3-S4,
  • from 23.2 before 23.2R2-S3,
  • from 23.4 before 23.4R2-S3,
  • from 24.2 before 24.2R1-S1, 24.2R2.

An indicator of compromise is to review the CPU % of the httpd process in the CLI: e.g. show system processes extensive | match httpd  PID nobody       52   0   20M    191M select   2   0:01   80.00% httpd{httpd} <<<<< the percentage of httpd usage if high may be an indicator

Affected products

57
  • Juniper Networks/Junos57 versions
    cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*+ 56 more
    • cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*range: <=21.4
    • cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r3-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r3-s4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*
    • (no CPE)range: <21.4R3-S9, <22.2R3-S5, <22.4R3-S4, <23.2R2-S3, <23.4R2-S3, <24.2R1-S1, <24.2R2
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.