CISA KEV · catalog date Mar 13, 2025 · first observed Jul 19, 2026
Evidence dossier
CVE-2025-21590
Junos OS: An local attacker with shell access can execute arbitrary code
Exploited in the wild (CISA KEV since Mar 13, 2025). juniper reports CVSS 4.0 6.7. EPSS estimates 1.7% exploit likelihood as of Aug 27, 2026.
62.0–63.6Priority evidence range
As of Aug 27, 2026
Normalized restatement
An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device. This issue is not exploitable from the Junos CLI. This issue affects Junos OS: * All versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R1-S2, 24.2R2.
- State
- PUBLISHED
- Published
- Mar 12, 2025
- Updated
- Feb 26, 2026
- Evidence coverage
- 99%
Evidence chronology
What was known when
- Source dateSource date omittedFirst observed by CASCACISA-ADPOriginal evidence ↗
Record text: CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
- Source dateSource date omittedFirst observed by CASCAjuniperOriginal evidence ↗
Record text: Junos OS: An local attacker with shell access can execute arbitrary code
Inspect raw assertion
- Field
container- Value
- Junos OS: An local attacker with shell access can execute arbitrary code
- Source dateFirst observed by CASCACISA KEVOriginal evidence ↗
Exploitation cataloged: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
- Source dateFirst observed by CASCAFIRST EPSSOriginal evidence ↗
EPSS score: 1.71% probability · 75.73th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.017150000000; percentile 0.757300000000
FIRST EPSS · score date Aug 27, 2026 · 75.7th percentile · first observed Aug 27, 2026
juniper · CVSS 4.0 · first observed Jul 19, 2026 · same-version scores align in this snapshot
Evidence detail
Source limits and decisions
Why each evidence state has this value
Outside this view’s verified evidenceReason detail begins outside this selected snapshot; the state remains source-bound.
Source comparison
Who said what
CISA-ADPIndependent enrichment
Record text
CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
juniperOriginal assertion
Record text
Junos OS: An local attacker with shell access can execute arbitrary code
Inspect raw assertion
- Field
container- Value
- Junos OS: An local attacker with shell access can execute arbitrary code
CISA KEVOriginal assertion
Exploitation cataloged
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
FIRST EPSSOriginal assertion
EPSS score
1.71% probability · 75.73th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.017150000000; percentile 0.757300000000
Applicability
Cited product scope
82Underlying assertions
1Canonical products
82Target assertions
0Constraint assertions
Grouped from 1 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.
Identity source boundaries
- Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z
27d65b0f-b718-4b4f-bb79-c47c68d09dfa - Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z
955dae73-7302-438b-aee1-058d7cc5d48e
2 scope groups
juniper · source assertedJuniper NetworksJunos OSDirect source scope
Affected: 0 to before 21.2R3-S9 (semver comparison)Affected: 21.4 to before 21.4R3-S10 (semver comparison)Affected: 22.2 to before 22.2R3-S6 (semver comparison)Affected: 22.4 to before 22.4R3-S6 (semver comparison)Affected: 23.2 to before 23.2R2-S3 (semver comparison)Affected: 23.4 to before 23.4R2-S4 (semver comparison)Affected: 24.2 to before 24.2R1-S2, 24.2R2 (semver comparison)
Source-reported scopeCanonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "0", "lessThan": "21.2R3-S9", "versionType": "semver"}, {"status": "affected", "version": "21.4", "lessThan": "21.4R3-S10", "versionType": "semver"}, {"status": "affected", "version": "22.2", "lessThan": "22.2R3-S6", "versionType": "semver"}, {"status": "affected", "version": "22.4", "lessThan": "22.4R3-S6", "versionType": "semver"}, {"status": "affected", "version": "23.2", "lessThan": "23.2R2-S3", "versionType": "semver"}, {"status": "affected", "version": "23.4", "lessThan": "23.4R2-S4", "versionType": "semver"}, {"status": "affected", "version": "24.2", "lessThan": "24.2R1-S2, 24.2R2", "versionType": "semver"}]NVD CPE · OPERATING SYSTEMjuniperjunosVulnerable target · 82 assertions
Any version (unconstrained) (<= 21.2); Version 21.2; Version 21.4; Version 22.2; Version 22.4; Version 23.2; Version 23.4; Version 24.2Canonical identity
Scope supportedproduct-7cd283e8e07c377a714f066def688e2c997bf1391107ad32edecea8a128ac327Linked exactInspect raw assertions
cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
71745d02-d226-44dc-91ad-678c85f5e6fc
cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 42
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
786f993e-32cb-492a-a7cc-a7e4f48ea8b9
cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 53
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
7fc1ba1a-df0e-4b15-86ba-24c60e546732
cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 37
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2f28f73e-8563-41b9-a313-bbaad5b57a67
cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e596abd9-6ecd-48dc-b770-87b7e62ea345
cpe:2.3:o:juniper:junos:21.2:r3-s8:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5dcaa120-20a2-43d8-87d3-716225ce233f
cpe:2.3:o:juniper:junos:*:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 0
- Logic
- OR
- Version bounds
- through including 21.2
- Match ID
7be0aae6-1cd8-40ca-b48f-8831395f5097
cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
79ed3ce8-cc57-43ab-9a26-bbc87816062d
cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 27
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0a5b196a-2af1-4ae5-9148-a75a572807bc
cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 81
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
266b520a-482a-43f7-90f8-b9d64d30034f
cpe:2.3:o:juniper:junos:21.4:r3-s9:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 33
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4cb6507d-ffef-44b4-b27b-0fa8b4a3b3d3
cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 51
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3a064b6b-a99b-4d8d-a62d-b00c7870bc30
cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 22
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
09ff5818-0803-4646-a386-d7c645ee58a3
cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
62178549-b679-4902-bfdb-2993803b7fce
cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 61
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1a78cc80-e8b1-4cda-bb35-a61833657fa7
cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 54
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ebb967bf-3495-476d-839a-9dbfcbe69f91
cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
de22ca01-ea7e-4ee5-b59f-ee100688c1da
cpe:2.3:o:juniper:junos:22.2:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 45
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
05e47861-3311-45e2-a722-8cd7ffdc2dfd
cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 50
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cb1a77d6-d3ad-481b-979c-8f778530b175
cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 40
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ec91f9d-deda-46b4-a39f-59a2cdb86c2e
cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 48
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1379ef30-af04-4f98-8328-52a631f24737
cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 41
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
591aa3e6-62a2-4a1a-a04c-e808f71d8b6e
cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 76
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a7c207e3-0252-4192-8e8c-e2ed2831b4f4
cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 80
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8463adb4-b8a7-4d63-97a9-232ed713a21c
cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 39
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5ec0d2d2-4922-4675-8a2c-57a08d7be334
cpe:2.3:o:juniper:junos:24.2:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 77
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
eb144ab0-6192-41fa-96a0-3cca399fa10b
cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 65
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1ada814b-ef98-45b1-af7a-0c89688f7ca5
cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 57
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8bb98579-fa33-4e41-a162-a46e9709fbd3
cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 71
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8b74ac3e-8fc9-400a-a176-4f7f21f10756
cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 23
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2229fa59-eb24-49a2-85ce-f529a8de6ba7
cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
737ddf96-7b1d-44e2-ad0f-e2f50858b2a3
cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 1
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a52af794-b36b-43a6-82e9-628658624b0a
cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 74
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
166bfdb3-1945-4949-bc2b-e18442ff2e4d
cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 70
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
be8a5ba3-87bd-473a-b229-2aab2c797005
cpe:2.3:o:juniper:junos:22.4:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 47
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f99af592-0553-4e6f-8561-5f031a82a822
cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 36
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8d862e6f-0d01-4b25-8340-888c30f75a2f
cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 30
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
44e98bc3-1d43-481a-ab09-ffa502c36aaf
cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
39e44b09-7310-428c-8144-ae9db0484d1f
cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 25
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5f3f54f1-75b3-400d-a735-2c27c8cebe79
cpe:2.3:o:juniper:junos:21.4:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f8a1c641-97e3-4844-96ce-b783ee9a0639
cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 24
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0cb280d8-c5d8-4b51-a879-496accde4538
cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
36ed4552-2420-45f9-b6e4-6da2b2b12870
cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 35
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e949b21b-ad62-4022-9088-06313277479e
cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 21
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ad697df-9738-4276-94ed-7b9380cd09f5
cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4a43752d-a4af-4b4e-b95b-192e42883a5b
cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 34
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
06156cd6-09d3-4a05-9c5e-bc64a70640f9
cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 62
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4b3b2fe1-c228-46be-ac76-70c2687050ae
cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 73
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
175ccb13-76c0-44a4-a71d-41e22b92eb23
cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 66
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a6fb32df-d062-4fb9-8777-452978bec7b7
cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 31
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1a0da88f-6c61-4fea-abf3-99f7dd43db0b
cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 49
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
28e42a41-7965-456b-b0af-9d3229ce4d4c
cpe:2.3:o:juniper:junos:22.2:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 46
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
748eab0a-6b22-4098-8735-cc76beaa9bb7
cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 38
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e37d4694-c80b-475e-ab5b-bb431f59c5e1
cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4310d2d9-a8a6-48f8-9384-0a0692a1e1c3
cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 52
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
40813417-a938-4f74-a419-8c5188a35486
cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 75
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5923610f-878c-48ca-8b5d-9c609e4dd4db
cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 72
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cb2d1fce-8019-4ce1-ba45-d62f91af7b51
cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 56
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8494546c-00ea-49b6-b6fa-fde42ca5b1fa
cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 69
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
78481abc-3620-410d-bc78-334657e0bb75
cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 67
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b3b6c811-5c10-4486-849d-5559b592350a
cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c28a14e7-7ea0-4757-9764-e39a27cfdfa5
cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 59
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
494d1d96-1da2-4b0a-9536-1b5a4fdfca09
cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 28
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3b457616-2d91-4913-9a7d-038bbf8f1f66
cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9962b01c-c57c-4359-9532-676ab81ce8b0
cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 64
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b227e831-30ff-4be1-b8b2-31829a5610a6
cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
42986538-e9d0-4c2e-b1c4-a763a4ee451b
cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2307bf56-640f-49a8-b060-6acb0f653a61
cpe:2.3:o:juniper:junos:21.2:r3-s7:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
35e0bb39-18ae-4fad-a528-fdff6222dde5
cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
53938295-8999-4316-9ded-88e24d037852
cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 32
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
25b4fc60-140d-49ef-8011-a5888d8493b0
cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 63
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f1b16ff0-900f-4aee-b670-a537139f6909
cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 43
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
60cea89d-bac4-41cd-a1d1-aa5eddebd54a
cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 2
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3998dc76-f72f-4452-9150-652140b113eb
cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 78
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
89524d6d-0b22-4952-ad8e-8072c5a05d5c
cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 58
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
08e2562f-fb18-4347-8497-7d61b8157ebb
cpe:2.3:o:juniper:junos:23.4:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 68
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0dae7546-b585-4c6e-a9e6-d07c7fe1ad8a
cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 79
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ad69a194-1b03-44ea-8092-79bd10c6f729
cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 29
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c470fb4e-a927-4af3-acb0-ad1e264218b7
cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 60
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
60a1e37b-1990-44d9-87fe-300678243be2
cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 55
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
7e5688d6-dca4-4550-9cd1-a3d792252129
cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 26
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
476a49e7-37e9-40f9-bf2d-9bbffaa1dffc
cpe:2.3:o:juniper:junos:22.2:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 44
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bc449cc7-b2d6-41cb-8d6c-81de89e79520
Affected-product evidence
Accepted scope and product mapping
0 canonical links · 0 source-reported links
Applicability remains source-scoped; safety and exposure remain unassessed.
Assessments
CVSS by origin
sirt@juniper.netCVSS 4.0 · role Secondary · priority eligiblevalid_match
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsirt@juniper.netCVSS 3.1 · role Secondary · priority eligiblevalid_match
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NjuniperCVSS 4.0 · role unknown · display onlyDirect record assessment retained outside normalized eligibility
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:NjuniperCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibility
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NEvidence boundaries
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
- NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
- OSV aggregation and OSV-converted NVD material are not independent corroboration.
- Red Hat facts are vendor assertions for the exact supplied products.
- Nonmembership and not-yet-observed states are not proof of safety.