All vulnerabilities
CVE-2025-21590

Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

Juniper Junos OSNetwork & edge
Open in ThreatlineRecord JSON
CVSS
4.4Medium
ExploitationExploited in the wildAdded to KEV 13 Mar 2025CISA KEV
Exploit odds (EPSS)1.74%Chance of exploitation activity in the next 30 days, higher than 77% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in21.2R3-S9Also 21.4R3-S10, 22.2R3-S6 and 4 moreCVE List
Federal deadline3 Apr 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

Show all 7 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 12 Mar 2025, 13:59 UTCPublishedCVE List
  2. 13 Mar 2025Added to CISA KEVCISA KEV

Description

Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.

Text from CVE List

Affected versions 7

  • Junos OSaffected: all versions before 21.2R3-S9CVE List
  • Junos OSaffected: 21.4 before 21.4R3-S10CVE List
  • Junos OSaffected: 22.2 before 22.2R3-S6CVE List
  • Junos OSaffected: 22.4 before 22.4R3-S6CVE List
  • Junos OSaffected: 23.2 before 23.2R2-S3CVE List
  • Junos OSaffected: 23.4 before 23.4R2-S4CVE List
  • Junos OSaffected: 24.2 before 24.2R1-S2, 24.2R2CVE List

References 5