Vulnerabilities fixed in Juniper Networks Junos OS

🗓️ 13 Oct 2025 07:17:00Reported by NCSCType

Juniper updates Junos OS on EX4600, QFX5000, SRX4700 to fix unauthenticated denial of service and authentication bypass.

Reporter	Title	Published	Views	Family All 162
BDU FSTEC	The vulnerability of the Packet Forwarding Engine (PFE) module of the JunOS operating system, which allows a hacker to trigger a service failure.	17 Dec 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Juniper Networks Junos Space Security Director allows a attacker to gain unauthorized access to and modify protected information.	17 Dec 202500:00	–	bdu_fstec
Circl	CVE-2025-11198	8 Oct 202516:01	–	circl
Circl	CVE-2025-52960	8 Oct 202516:01	–	circl
Circl	CVE-2025-52961	8 Oct 202516:00	–	circl
Circl	CVE-2025-59957	8 Oct 202515:59	–	circl
Circl	CVE-2025-59958	8 Oct 202515:59	–	circl
Circl	CVE-2025-59962	8 Oct 202515:59	–	circl
Circl	CVE-2025-59964	8 Oct 202515:59	–	circl
Circl	CVE-2025-59967	8 Oct 202515:59	–	circl

Source	Link
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Juniper-Security-Director-Insufficient-authorization-for-sensitive-resources-in-web-interface-CVE-2025-59968
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Device-allows-login-for-user-with-expired-password-CVE-2025-60010
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Specific-BGP-EVPN-update-message-causes-rpd-crash-CVE-2025-60004
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-With-BGP-sharding-enabled-change-in-indirect-next-hop-can-cause-RPD-crash-CVE-2025-59962
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-ACX7024-ACX7024X-ACX7100-32C-ACX7100-48L-ACX7348-ACX7509-When-specific-valid-multicast-traffic-is-received-on-the-L3-interface-a-vulnerable-device-evo-pfemand-crashes-and-restarts-CVE-2025-59967
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-Multiple-OS-command-injection-vulnerabilities-fixed-CVE-2025-60006
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-PTX-Series-except-PTX10003-An-unauthenticated-adjacent-attacker-sending-specific-valid-traffic-can-cause-a-memory-leak-in-cfmman-leading-to-FPC-crash-and-restart-CVE-2025-52961
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-Evolved-PTX-Series-When-firewall-filter-rejects-traffic-these-packets-are-erroneously-sent-to-the-RE-CVE-2025-59958
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-EX4600-Series-and-QFX5000-Series-An-attacker-with-physical-access-can-open-a-persistent-backdoor-CVE-2025-59957
supportportal	www.supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-Receipt-of-specific-SIP-packets-in-a-high-utilization-situation-causes-a-flowd-crash-CVE-2025-52960

13 Oct 2025 07:17Current

7.4High risk

Vulners AI Score7.4

CVSS 48.7 - 9.2

CVSS 3.18.6

EPSS0.01015

SSVC