Out-of-Bounds Write Vulnerability in Juniper Junos OS on MX Series Devices

CVE-2025-52952

What is CVE-2025-52952?

An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards allows an unauthenticated adjacent attacker to exploit the issue by sending a malformed packet, which can lead to repeated crashes and restarts of the FPC. This situation results in a prolonged Denial of Service (DoS) condition, affecting the overall availability of the device. Continuous processing of this packet exacerbates the DoS impact, compromising the reliability of network operations. It's notable that this vulnerability is not enabled by default.

References