ACTIEF MISBRUIKT
CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
| Leverancier | Juniper |
|---|---|
| Product | Junos OS |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 13 mrt 2025 |
| CISA-deadline (Amerikaanse overheid) | 3 apr 2025 |
| Zwakte (CWE) | CWE-653 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.
BRONNEN
Andere lekken bij Juniper
- CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerability
- CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.