CVE-2025-21590: Junos OS: An local attacker with shell access can execute arbitrary code

Medium severity · published Mar 12, 2025

CVE-2025-21590

Junos OS: An local attacker with shell access can execute arbitrary code

In wildKEV

4.4

CVSS

1.7%

EPSS

Yes

On KEV

Description

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device. This issue is not exploitable from the Junos CLI. This issue affects Junos OS: * All versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R1-S2, 24.2R2.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack vector

Local

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.7% · higher than 78% of CVEs

Exploited in the wildYes

CISA KEVListed Mar 13, 2025

Federal remediation dueApr 3, 2025

Ransomware campaign useNot known

Affected products

Which versions

Junos OS · Juniper

before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; +1 more · source: vendor, NVD, KEV

Affected product

Junos OS

Juniper

All Junos OS CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-21590

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-21590

CISA KEV catalogue

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

vendor-advisory

https://supportportal.juniper.net/JSA93446

third-party-advisory

https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers