Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Description
Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Running Juniper devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Juniper alerts
Turn on Juniper alerts
Details
- Vendor
- Juniper
- Product
- Junos OS
- CVE
- CVE-2025-21590
- Affected versions
- Junos OS 21.2: before 21.2R3-S9 — fixed in 21.2R3-S9
Junos OS 21.4: from 21.4 to 21.4R3-S10 (excluded) — fixed in 21.4R3-S10
Junos OS 22.2: from 22.2 to 22.2R3-S6 (excluded) — fixed in 22.2R3-S6
Junos OS 22.4: from 22.4 to 22.4R3-S6 (excluded) — fixed in 22.4R3-S6
Junos OS 23.2: from 23.2 to 23.2R2-S3 (excluded) — fixed in 23.2R2-S3
Junos OS 23.4: from 23.4 to 23.4R2-S4 (excluded) — fixed in 23.4R2-S4
Junos OS 24.2: from 24.2 to 24.2R1-S2 (excluded) — fixed in 24.2R1-S2 (from the advisory and NVD; check the exact builds in the official advisory) - CVSS score
- 4.4
- Actively exploited
- Yes, listed in the CISA Known Exploited Vulnerabilities catalog
- CISA due date
- April 3, 2025 (deadline for US federal agencies: a good benchmark for you too)
- Source
- CISA KEV – original advisory
- Published
- March 13, 2025
The description and the recommended action are quoted from the public advisory; severity, exploitation status and affected versions are compiled automatically from public sources and may contain errors. The vendor's original advisory prevails: check it before taking action. This information is provided without warranty and does not replace a professional assessment.