UI Discrepancy in Juniper Networks Junos OS Allows Unauthorized Access
CVE-2025-52983
8.6HIGH
What is CVE-2025-52983?
A security flaw exists in Juniper Networks Junos OS on VM Host systems where an attacker can exploit a UI discrepancy. Despite the removal of the configured public key for root access, remote users possessing the corresponding private key can still gain root login credentials. This vulnerability impacts various versions of Junos OS, enabling potential unauthorized access to system resources, necessitating timely patches and updates from affected users.
Affected Version(s)
Junos OS 0 < 22.2R3-S7
Junos OS 22.4 < 22.4R3-S5
Junos OS 23.2 < 23.2R2-S3
References
CVSS V4
Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved