Origin Validation Error in Junos OS on Juniper Networks EX4600 and QFX5000 Series

CVE-2025-59957

What is CVE-2025-59957?

An Origin Validation Error in Junos OS on Juniper Networks devices allows an unauthenticated attacker with physical access to create a hidden backdoor, enabling complete control over the system. If the device is misconfigured without a root password, an attacker can modify a crucial system file. This modification adds unauthorized configurations to the Junos settings, potentially allowing access to sensitive information and control without detection. The backdoor remains intact even after reboots or system resets, posing a significant security risk. Affected users should carefully examine the /etc/config/-defaults[-flex].conf file for unauthorized changes and compare it against an untouched version from a secure source. To rectify the issue, reinstallation from trusted physical media is required.

References