Description
An Authentication Bypass Using an
Alternate Path or Channel vulnerability in Juniper Networks Session Smart
Router may allows a network-based attacker to bypass authentication
and take administrative control of the device.
This issue affects Session Smart Router:
* from 5.6.7 before 5.6.17,
* from 6.0 before 6.0.8 (affected from 6.0.8),
* from 6.1 before 6.1.12-lts,
* from 6.2 before 6.2.8-lts,
* from 6.3 before 6.3.3-r2;
This issue affects Session Smart Conductor:
* from 5.6.7 before 5.6.17,
* from 6.0 before 6.0.8 (affected from 6.0.8),
* from 6.1 before 6.1.12-lts,
* from 6.2 before 6.2.8-lts,
* from 6.3 before 6.3.3-r2;
This issue affects WAN Assurance Managed Routers:
* from 5.6.7 before 5.6.17,
* from 6.0 before 6.0.8 (affected from 6.0.8),
* from 6.1 before 6.1.12-lts,
* from 6.2 before 6.2.8-lts,
* from 6.3 before 6.3.3-r2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Session Smart Router | 5.6.7 – < 5.6.17, 6.1 – < 6.1.12-lts, 6.2 – < 6.2.8-lts, 6.3 – < 6.3.3-r2 | 5.6.17 |
| Juniper Networks | Session Smart Conductor | 5.6.7 – < 5.6.17, 6.1 – < 6.1.12-lts, 6.2 – < 6.2.8-lts, 6.3 – < 6.3.3-r2 | 5.6.17 |
| Juniper Networks | WAN Assurance Managed Router | 5.6.7 – < 5.6.17, 6.1 – < 6.1.12-lts, 6.2 – < 6.2.8-lts, 6.3 – < 6.3.3-r2 | 5.6.17 |
Advisories 2
- WID-SEC-2025-0393 Juniper Session Smart Router: Schwachstelle ermöglicht Erlangen von Administratorrechten BSI CERT-Bund (WID) · Jan 27, 2026
- NCSC-2025-0062 Kwetsbaarheid verholpen in Juniper Session Smart Router NCSC-NL (Netherlands) · Feb 18, 2025
References
- https://supportportal.juniper.net/ vendor-advisory
- https://support.juniper.net/support/eol/software/ssr/ related
- https://kb.juniper.net/JSA94663 vendor-advisory