CVE Watch—

CVE-2025-21590

Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

CVSS

—

Sin CVSS

EPSS

1.7%

p76

KEV

SÍ

13 mar 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

1.7%EPSS · 30 días1.7%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Juniper / Junos OS

Vulnerabilidad

Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

Añadido a KEV

13 mar 2025

Remediar antes de

3 abr 2025

Uso conocido en ransomware

Descripción resumida

Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-21590

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-36846—

99.9%

KEV—80Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—CVE-2023-36845—

99.8%

KEV—80Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability—CVE-2023-36844—

99.8%

KEV—80Juniper Junos OS EX Series PHP External Variable Modification Vulnerability—CVE-2023-36847—

99.7%

KEV—80Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability—CVE-2020-1631—

91.2%

KEV—77Juniper Junos OS Path Traversal Vulnerability—CVE-2023-36851—

63.0%

KEV—69Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—