CVE-2025-21589

🗓️ 27 Jan 2026 20:32:13Reported by juniperType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 32 Views

Authentication bypass in Juniper Session Smart Router, Conductor, and WAN Assurance routers enabling admin takeover.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2025-21589	27 Jan 202620:32	–	attackerkb
Circl	CVE-2025-21589	11 Feb 202506:56	–	circl
Circl	NCSC-2025-0062	19 Feb 202506:59	–	circl
CNNVD	Several products of Juniper Networks have security vulnerabilities	27 Jan 202600:00	–	cnnvd
Cvelist	CVE-2025-21589 Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability	27 Jan 202620:32	–	cvelist
EUVD	EUVD-2025-206381	27 Jan 202620:32	–	euvd
NCSC	Vulnerability fixed in Juniper Session Smart Router	18 Feb 202514:25	–	ncsc
NVD	CVE-2025-21589	27 Jan 202621:15	–	nvd
Positive Technologies	PT-2025-6925	11 Feb 202500:00	–	ptsecurity
The Hacker News	⚡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple's Data Dilemma	24 Feb 202511:20	–	thn

Vulners

Node

juniper_networks session_smart_routerRange5.6.7–5.6.17

juniper_networks session_smart_routerRange6.1–6.1.12-lts

juniper_networks session_smart_routerRange6.2–6.2.8-lts

juniper_networks session_smart_routerRange6.3–6.3.3-r2

juniper_networks session_smart_conductorRange5.6.7–5.6.17

juniper_networks session_smart_conductorRange6.1–6.1.12-lts

juniper_networks session_smart_conductorRange6.2–6.2.8-lts

juniper_networks session_smart_conductorRange6.3–6.3.3-r2

juniper_networks wan_assurance_managed_routerRange5.6.7–5.6.17

juniper_networks wan_assurance_managed_routerRange6.1–6.1.12-lts

juniper_networks wan_assurance_managed_routerRange6.2–6.2.8-lts

juniper_networks wan_assurance_managed_routerRange6.3–6.3.3-r2

[
  {
    "defaultStatus": "unaffected",
    "product": "Session Smart Router",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "5.6.17",
        "status": "affected",
        "version": "5.6.7",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "6.0.8",
            "status": "affected"
          }
        ],
        "lessThan": "6.0.8",
        "status": "unaffected",
        "version": "6.0",
        "versionType": "semver"
      },
      {
        "lessThan": "6.1.12-lts",
        "status": "affected",
        "version": "6.1",
        "versionType": "semver"
      },
      {
        "lessThan": "6.2.8-lts",
        "status": "affected",
        "version": "6.2",
        "versionType": "semver"
      },
      {
        "lessThan": "6.3.3-r2",
        "status": "affected",
        "version": "6.3",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Session Smart Conductor",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "5.6.17",
        "status": "affected",
        "version": "5.6.7",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "6.0.8",
            "status": "affected"
          }
        ],
        "lessThan": "6.0.8",
        "status": "unaffected",
        "version": "6.0",
        "versionType": "semver"
      },
      {
        "lessThan": "6.1.12-lts",
        "status": "affected",
        "version": "6.1",
        "versionType": "semver"
      },
      {
        "lessThan": "6.2.8-lts",
        "status": "affected",
        "version": "6.2",
        "versionType": "semver"
      },
      {
        "lessThan": "6.3.3-r2",
        "status": "affected",
        "version": "6.3",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAN Assurance Managed Router",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "5.6.17",
        "status": "affected",
        "version": "5.6.7",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "6.0.8",
            "status": "affected"
          }
        ],
        "lessThan": "6.0.8",
        "status": "unaffected",
        "version": "6.0",
        "versionType": "semver"
      },
      {
        "lessThan": "6.1.12-lts",
        "status": "affected",
        "version": "6.1",
        "versionType": "semver"
      },
      {
        "lessThan": "6.2.8-lts",
        "status": "affected",
        "version": "6.2",
        "versionType": "semver"
      },
      {
        "lessThan": "6.3.3-r2",
        "status": "affected",
        "version": "6.3",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA94663
support	www.support.juniper.net/support/eol/software/ssr/
supportportal	www.supportportal.juniper.net/

15 Apr 2026 14:34Current

6.1Medium risk

Vulners AI Score6.1

CVSS 49.3

CVSS 3.19.8

EPSS0.00041

SSVC

CWE-288