Password Aging Vulnerability in Juniper Networks Junos OS and Junos OS Evolved

CVE-2025-60010

What is CVE-2025-60010?

A security issue in the RADIUS client of Juniper Networks' Junos OS and Junos OS Evolved allows authenticated network-based attackers to bypass mandatory password change policies. Due to this vulnerability, users whose passwords have expired may still log in if the RADIUS server responds with a reject without enforcing the required password change, creating a potential access point for unauthorized activity. This affects various versions of Junos OS and Junos OS Evolved, especially under certain conditions of RADIUS password management, and necessitates prompt action to mitigate security risks by updating to the latest versions.

References