Medium 1 exploited CVE WID-SEC-2025-0552 1 CVE

Juniper JUNOS: Schwachstelle ermöglicht Codeausführung

Published Mar 12, 2025 · Updated Mar 13, 2025 · Revision 2 · de-DE

Vendor: Juniper Networks Product: Junos Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Juniper JUNOS ausnutzen, um beliebigen Programmcode auszuführen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.

Vulnerabilities 1

Medium 4.4

CVE-2025-21590 Exploited

Junos OS: An local attacker with shell access can execute arbitrary code

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrar…

Juniper Networks Junos OS Network devices

Mar 12, 2025
KEV Mar 13, 2025

Revision history

2025-03-13 #2
Referenz(en) aufgenommen: JSA95385
2025-03-12 #1
Initiale Fassung

References

Juniper Security Bulletin vom 2025-03-12
https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590
Juniper Security Advisory vom 2025-03-12
https://supportportal.juniper.net/s/article/2025-03-Reference-Advisory-The-RedPenguin-Malware-Incident?language=en_US