CVE-2025-30650

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-30650", "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "state": "PUBLISHED", "assignerShortName": "juniper", "dateReserved": "2025-03-24T19:34:11.321Z", "datePublished": "2026-04-08T17:26:35.685Z", "dateUpdated": "2026-04-13T21:17:19.185Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "22.4R3-S8", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "23.2R2-S6", "status": "affected", "version": "23.2", "versionType": "semver"}, {"lessThan": "23.4R2-S6", "status": "affected", "version": "23.4", "versionType": "semver"}, {"lessThan": "24.2R2-S3", "status": "affected", "version": "24.2", "versionType": "semver"}, {"lessThan": "24.4R2", "status": "affected", "version": "24.4", "versionType": "semver"}, {"lessThan": "25.2R2", "status": "affected", "version": "25.2", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Juniper SIRT would like to acknowledge and thank Pierre EMERIAUD & Orange CERT-CC from Orange group for responsibly reporting this vulnerability."}], "datePublic": "2026-04-08T16:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A&nbsp;Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.<br><br>This issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:<br><ul><li>MPC7, MPC8, MPC9, MPC10, MPC11</li><li>LC2101, LC2103</li><li>LC480, LC4800, LC9600</li><li>MX304 (built-in FPC)</li><li>MX-SPC3</li><li>SRX5K-SPC3</li><li>EX9200-40XS<br><br></li><li>FPC3-PTX-U2, FPC3-PTX-U3</li><li>FPC3-SFF-PTX</li><li>LC1101, LC1102, LC1104, LC1105</li></ul><p><br></p><p>This issue affects&nbsp;Junos OS:&nbsp;</p><p></p><ul><li>all versions before 22.4R3-S8,&nbsp;</li><li>from 23.2 before 23.2R2-S6,&nbsp;</li><li>from 23.4 before 23.4R2-S6,&nbsp;</li><li>from 24.2 before 24.2R2-S3,&nbsp;</li><li>from 24.4 before 24.4R2,</li><li>from 25.2 before 25.2R2.</li></ul><p></p>"}], "value": "A\u00a0Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.\n\nThis issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:\n * MPC7, MPC8, MPC9, MPC10, MPC11\n * LC2101, LC2103\n * LC480, LC4800, LC9600\n * MX304 (built-in FPC)\n * MX-SPC3\n * SRX5K-SPC3\n * EX9200-40XS\n\n\n * FPC3-PTX-U2, FPC3-PTX-U3\n * FPC3-SFF-PTX\n * LC1101, LC1102, LC1104, LC1105\n\n\n\n\n\nThis issue affects\u00a0Junos OS:\u00a0\n\n\n\n * all versions before 22.4R3-S8,\u00a0\n * from 23.2 before 23.2R2-S6,\u00a0\n * from 23.4 before 23.4R2-S6,\u00a0\n * from 24.2 before 24.2R2-S3,\u00a0\n * from 24.4 before 24.4R2,\n * from 25.2 before 25.2R2."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"cvssV4_0": {"Automatable": "NO", "Recovery": "AUTOMATIC", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "baseScore": 8.4, "baseSeverity": "HIGH", "privilegesRequired": "HIGH", "providerUrgency": "AMBER", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:N/R:A/V:C/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper", "dateUpdated": "2026-04-13T21:17:19.185Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-fwhc-gh5m-v8fq"}, {"tags": ["vendor-advisory"], "url": "https://kb.juniper.net/JSA107863"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The following software releases have been updated to resolve this specific issue: 22.4R3-S8, 23.2R2-S6, 23.4R2-S6, 24.2R2-S3, 24.4R2, 25.2R2, 25.4R1, and all subsequent releases."}], "value": "The following software releases have been updated to resolve this specific issue: 22.4R3-S8, 23.2R2-S6, 23.4R2-S6, 24.2R2-S3, 24.4R2, 25.2R2, 25.4R1, and all subsequent releases."}], "source": {"advisory": "JSA107863", "defect": ["1872703"], "discovery": "EXTERNAL"}, "timeline": [{"lang": "en", "time": "2026-04-08T16:00:00.000Z", "value": "Initial Publication"}, {"lang": "en", "time": "2026-04-13T16:00:00.000Z", "value": "Removed reference to EVO. Issue is specific to Junos OS with Linux-based line cards."}], "title": "Junos OS: Privileged local user can gain access to a Linux-based FPC as root", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "There are no known workarounds for this issue."}], "value": "There are no known workarounds for this issue."}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-08T20:06:27.813930Z", "id": "CVE-2025-30650", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T20:07:06.271Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-30650", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-08T20:06:27.813930Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T20:06:54.101Z"}}], "cna": {"title": "Junos OS: Privileged local user can gain access to a Linux-based FPC as root", "source": {"defect": ["1872703"], "advisory": "JSA107863", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Juniper SIRT would like to acknowledge and thank Pierre EMERIAUD & Orange CERT-CC from Orange group for responsibly reporting this vulnerability."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "AUTOMATIC", "baseScore": 8.4, "Automatable": "NO", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:N/R:A/V:C/RE:M/U:Amber", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Juniper Networks", "product": "Junos OS", "versions": [{"status": "affected", "version": "0", "lessThan": "22.4R3-S8", "versionType": "semver"}, {"status": "affected", "version": "23.2", "lessThan": "23.2R2-S6", "versionType": "semver"}, {"status": "affected", "version": "23.4", "lessThan": "23.4R2-S6", "versionType": "semver"}, {"status": "affected", "version": "24.2", "lessThan": "24.2R2-S3", "versionType": "semver"}, {"status": "affected", "version": "24.4", "lessThan": "24.4R2", "versionType": "semver"}, {"status": "affected", "version": "25.2", "lessThan": "25.2R2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.", "supportingMedia": [{"type": "text/html", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.", "base64": false}]}], "timeline": [{"lang": "en", "time": "2026-04-08T16:00:00.000Z", "value": "Initial Publication"}, {"lang": "en", "time": "2026-04-13T16:00:00.000Z", "value": "Removed reference to EVO. Issue is specific to Junos OS with Linux-based line cards."}], "solutions": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 22.4R3-S8, 23.2R2-S6, 23.4R2-S6, 24.2R2-S3, 24.4R2, 25.2R2, 25.4R1, and all subsequent releases.", "supportingMedia": [{"type": "text/html", "value": "The following software releases have been updated to resolve this specific issue: 22.4R3-S8, 23.2R2-S6, 23.4R2-S6, 24.2R2-S3, 24.4R2, 25.2R2, 25.4R1, and all subsequent releases.", "base64": false}]}], "datePublic": "2026-04-08T16:00:00.000Z", "references": [{"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-fwhc-gh5m-v8fq", "tags": ["third-party-advisory"]}, {"url": "https://kb.juniper.net/JSA107863", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "There are no known workarounds for this issue.", "supportingMedia": [{"type": "text/html", "value": "There are no known workarounds for this issue.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A\u00a0Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.\n\nThis issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:\n * MPC7, MPC8, MPC9, MPC10, MPC11\n * LC2101, LC2103\n * LC480, LC4800, LC9600\n * MX304 (built-in FPC)\n * MX-SPC3\n * SRX5K-SPC3\n * EX9200-40XS\n\n\n * FPC3-PTX-U2, FPC3-PTX-U3\n * FPC3-SFF-PTX\n * LC1101, LC1102, LC1104, LC1105\n\n\n\n\n\nThis issue affects\u00a0Junos OS:\u00a0\n\n\n\n * all versions before 22.4R3-S8,\u00a0\n * from 23.2 before 23.2R2-S6,\u00a0\n * from 23.4 before 23.4R2-S6,\u00a0\n * from 24.2 before 24.2R2-S3,\u00a0\n * from 24.4 before 24.4R2,\n * from 25.2 before 25.2R2.", "supportingMedia": [{"type": "text/html", "value": "A&nbsp;Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.<br><br>This issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:<br><ul><li>MPC7, MPC8, MPC9, MPC10, MPC11</li><li>LC2101, LC2103</li><li>LC480, LC4800, LC9600</li><li>MX304 (built-in FPC)</li><li>MX-SPC3</li><li>SRX5K-SPC3</li><li>EX9200-40XS<br><br></li><li>FPC3-PTX-U2, FPC3-PTX-U3</li><li>FPC3-SFF-PTX</li><li>LC1101, LC1102, LC1104, LC1105</li></ul><p><br></p><p>This issue affects&nbsp;Junos OS:&nbsp;</p><p></p><ul><li>all versions before 22.4R3-S8,&nbsp;</li><li>from 23.2 before 23.2R2-S6,&nbsp;</li><li>from 23.4 before 23.4R2-S6,&nbsp;</li><li>from 24.2 before 24.2R2-S3,&nbsp;</li><li>from 24.4 before 24.4R2,</li><li>from 25.2 before 25.2R2.</li></ul><p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper", "dateUpdated": "2026-04-13T21:17:19.185Z"}}}, "cveMetadata": {"cveId": "CVE-2025-30650", "state": "PUBLISHED", "dateUpdated": "2026-04-13T21:17:19.185Z", "dateReserved": "2025-03-24T19:34:11.321Z", "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "datePublished": "2026-04-08T17:26:35.685Z", "assignerShortName": "juniper"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "22.4R3-S8", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "23.2R2-S6", "status": "affected", "version": "23.2", "versionType": "semver"}, {"lessThan": "23.4R2-S6", "status": "affected", "version": "23.4", "versionType": "semver"}, {"lessThan": "24.2R2-S3", "status": "affected", "version": "24.2", "versionType": "semver"}, {"lessThan": "24.4R2", "status": "affected", "version": "24.4", "versionType": "semver"}, {"lessThan": "25.2R2", "status": "affected", "version": "25.2", "versionType": "semver"}]}], "source": "sirt@juniper.net"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:*:-:*:*:*:*:*:*", "matchCriteriaId": "A343EB77-4A88-4C92-9B23-F11B3196DF40", "versionEndIncluding": "22.4", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*", "matchCriteriaId": "28E42A41-7965-456B-B0AF-9D3229CE4D4C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "CB1A77D6-D3AD-481B-979C-8F778530B175", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "3A064B6B-A99B-4D8D-A62D-B00C7870BC30", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*", "matchCriteriaId": "40813417-A938-4F74-A419-8C5188A35486", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "7FC1BA1A-DF0E-4B15-86BA-24C60E546732", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "EBB967BF-3495-476D-839A-9DBFCBE69F91", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*", "matchCriteriaId": "7E5688D6-DCA4-4550-9CD1-A3D792252129", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*", "matchCriteriaId": "8494546C-00EA-49B6-B6FA-FDE42CA5B1FA", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*", "matchCriteriaId": "8BB98579-FA33-4E41-A162-A46E9709FBD3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*", "matchCriteriaId": "494D1D96-1DA2-4B0A-9536-1B5A4FDFCA09", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*", "matchCriteriaId": "60A1E37B-1990-44D9-87FE-300678243BE2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*", "matchCriteriaId": "D306ED88-8700-4FD4-8919-3C85728C04C3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*", "matchCriteriaId": "11340C63-A638-420C-85C9-1B4438C88D52", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*", "matchCriteriaId": "1A78CC80-E8B1-4CDA-BB35-A61833657FA7", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*", "matchCriteriaId": "4B3B2FE1-C228-46BE-AC76-70C2687050AE", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "F1B16FF0-900F-4AEE-B670-A537139F6909", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "B227E831-30FF-4BE1-B8B2-31829A5610A6", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*", "matchCriteriaId": "1ADA814B-EF98-45B1-AF7A-0C89688F7CA5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "A6FB32DF-D062-4FB9-8777-452978BEC7B7", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "B3B6C811-5C10-4486-849D-5559B592350A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*", "matchCriteriaId": "078D61B9-A228-453C-9D20-6F9C6B20637F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*", "matchCriteriaId": "F1F136A0-021D-43FE-BDD3-AD7201F7FC03", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s5:*:*:*:*:*:*", "matchCriteriaId": "37147BC9-9ED8-48AE-906A-614AD8600962", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*", "matchCriteriaId": "78481ABC-3620-410D-BC78-334657E0BB75", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*", "matchCriteriaId": "BE8A5BA3-87BD-473A-B229-2AAB2C797005", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "8B74AC3E-8FC9-400A-A176-4F7F21F10756", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "CB2D1FCE-8019-4CE1-BA45-D62F91AF7B51", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*", "matchCriteriaId": "175CCB13-76C0-44A4-A71D-41E22B92EB23", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "166BFDB3-1945-4949-BC2B-E18442FF2E4D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "5923610F-878C-48CA-8B5D-9C609E4DD4DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*", "matchCriteriaId": "A7C207E3-0252-4192-8E8C-E2ED2831B4F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*", "matchCriteriaId": "E6974492-FE69-4340-8881-61C3329C1545", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s5:*:*:*:*:*:*", "matchCriteriaId": "279E59FE-96DF-4E1D-A3A2-61D180F04533", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*", "matchCriteriaId": "89524D6D-0B22-4952-AD8E-8072C5A05D5C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*", "matchCriteriaId": "AD69A194-1B03-44EA-8092-79BD10C6F729", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "8463ADB4-B8A7-4D63-97A9-232ED713A21C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "FE68337F-106E-4317-A5B6-292B0159F577", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*", "matchCriteriaId": "266B520A-482A-43F7-90F8-B9D64D30034F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "DD99F1B0-82B0-4CD3-8C8F-C0FFF44A8B90", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*", "matchCriteriaId": "1B7572BB-9C77-4214-9C5F-CC83C7B93E37", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*", "matchCriteriaId": "CAADBF98-38BE-40E2-AF1B-9077DCED0809", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "558F0A4C-0C72-4BF1-B2DE-C0D3BFD54BCD", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "127FE528-AB27-4B18-AF3B-1BE7C0AEEE20", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*", "matchCriteriaId": "D08A8D94-134A-41E7-8396-70D8B0735E9C", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:fpc3-ptx-u2:-:*:*:*:*:*:*:*", "matchCriteriaId": "74DA65E8-608C-4C0B-B717-E195BB3A8982", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:fpc3-ptx-u3:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB888D22-3314-4257-95B7-B18515F6E044", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:fpc3-sff-ptx:-:*:*:*:*:*:*:*", "matchCriteriaId": "BED56A5A-4E6D-41C8-9DB0-F80C30B88195", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc1101:-:*:*:*:*:*:*:*", "matchCriteriaId": "677A7C48-980E-4CFF-8648-0008D9DA8F59", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc1102:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D418227-9012-4508-9C9B-402BB74FFF6C", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc1104:-:*:*:*:*:*:*:*", "matchCriteriaId": "06506E9B-305A-4589-A237-49DF5A5E3612", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc1105:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B97458D-9B72-4019-AB09-96AFBFABB65B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc2101:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9C53ED6-2B85-49C6-BB00-9C21BEDB856F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc2103:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D389F4D-13A2-42EB-8FF3-880F38C58E1A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc480:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E8EBB06-2479-4D56-B8D9-15195D6F118F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc4800:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9C1C794-916A-401E-B430-D91E523B900D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc9600:-:*:*:*:*:*:*:*", "matchCriteriaId": "78296CAF-F1E3-4A3D-AEE1-C7E0BD2C18A4", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc10:-:*:*:*:*:*:*:*", "matchCriteriaId": "E821E5BD-8DF5-4C22-BD8E-2331318F97EB", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc11:-:*:*:*:*:*:*:*", "matchCriteriaId": "349364B1-359A-4D53-87D6-C440BC1D95E1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc7e-10g:-:*:*:*:*:*:*:*", "matchCriteriaId": "C91895B5-1184-4E3D-A81C-CDBBAF5ADC73", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc8e:-:*:*:*:*:*:*:*", "matchCriteriaId": "E401B681-AB69-4299-898B-7C81A288E6F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc9e:-:*:*:*:*:*:*:*", "matchCriteriaId": "5909E1A6-32E9-4574-87D5-4B3948F24B25", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx-spc3:-:*:*:*:*:*:*:*", "matchCriteriaId": "08870BF6-F53C-4669-9BB5-EB0691B4EF7B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx304:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F7FB0CC-624D-4AB9-A7AC-BB19838C3B22", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5k-spc3:-:*:*:*:*:*:*:*", "matchCriteriaId": "48014920-887A-42FD-B510-EE902F178881", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A\u00a0Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.\n\nThis issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:\n * MPC7, MPC8, MPC9, MPC10, MPC11\n * LC2101, LC2103\n * LC480, LC4800, LC9600\n * MX304 (built-in FPC)\n * MX-SPC3\n * SRX5K-SPC3\n * EX9200-40XS\n\n\n * FPC3-PTX-U2, FPC3-PTX-U3\n * FPC3-SFF-PTX\n * LC1101, LC1102, LC1104, LC1105\n\n\n\n\n\nThis issue affects\u00a0Junos OS:\u00a0\n\n\n\n * all versions before 22.4R3-S8,\u00a0\n * from 23.2 before 23.2R2-S6,\u00a0\n * from 23.4 before 23.4R2-S6,\u00a0\n * from 24.2 before 24.2R2-S3,\u00a0\n * from 24.4 before 24.4R2,\n * from 25.2 before 25.2R2."}, {"lang": "es", "value": "Una vulnerabilidad de autenticaci\u00f3n faltante para funci\u00f3n cr\u00edtica en el procesamiento de comandos de Juniper Networks Junos OS permite a un atacante local privilegiado obtener acceso a las tarjetas de l\u00ednea que ejecutan Junos OS Evolved como root.\n\nEste problema afecta a los sistemas que ejecutan Junos OS que utilizan tarjetas de l\u00ednea basadas en Linux. Las tarjetas de l\u00ednea afectadas incluyen:\n * MPC7, MPC8, MPC9, MPC10, MPC11\n * LC2101, LC2103\n * LC480, LC4800, LC9600\n * MX304 (FPC integrado)\n * MX-SPC3\n * SRX5K-SPC3\n * EX9200-40XS\n * FPC3-PTX-U2, FPC3-PTX-U3\n * FPC3-SFF-PTX\n * LC1101, LC1102, LC1104, LC1105\n\nEste problema afecta a Junos OS:\n * todas las versiones anteriores a 22.4R3-S8,\n * desde 23.2 antes de 23.2R2-S6,\n * desde 23.4 antes de 23.4R2-S6,\n * desde 24.2 antes de 24.2R2-S3,\n * desde 24.4 antes de 24.4R2,\n * desde 25.2 antes de 25.2R2."}], "id": "CVE-2025-30650", "lastModified": "2026-08-26T16:52:20.023", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "sirt@juniper.net", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "AUTOMATIC", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "AMBER", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:C/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "source": "sirt@juniper.net", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-30650", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-08T20:06:27.813930Z", "version": "2.0.3"}}]}, "published": "2026-04-08T19:24:00.440", "references": [{"source": "sirt@juniper.net", "tags": ["Third Party Advisory"], "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-fwhc-gh5m-v8fq"}, {"source": "sirt@juniper.net", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA107863"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "sirt@juniper.net", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[23.2,23.2R2-S6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[23.4,23.4R2-S6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[24.2,24.2R2-S3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[24.4,24.4R2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[25.2,25.2R2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Junos OS", "source": "cna", "vendor": "Juniper Networks"}, "product": "junos_os", "vendor": "juniper_networks"}], "analysis": {"en": {"generated_at": "2026-04-13T22:54:53.608135+00:00", "value": {"mitigation_remediation": ["Apply the latest Junos OS patch by upgrading to a release that includes 22.4R3\u2011S8, 23.2R2\u2011S6, 23.4R2\u2011S6, 24.2R2\u2011S3, 24.4R2, or 25.2R2, or any newer version in the same series."], "summary": {"action": "Apply Patch", "impact": "Root access on Linux-based FPC"}, "threat_synthesis": {"affected_systems": "The flaw targets Juniper Networks Junos OS devices that incorporate Linux\u2011based line cards. Impacted line cards are MPC7, MPC8, MPC9, MPC10, MPC11, LC2101, LC2103, LC480, LC4800, LC9600, MX304 (built\u2011in FPC), MX\u2011SPC3, SRX5K\u2011SPC3, EX9200\u201140XS, FPC3\u2011PTX\u2011U2, FPC3\u2011PTX\u2011U3, FPC3\u2011SFF\u2011PTX, LC1101, LC1102, LC1104, and LC1105. All Junos OS releases prior to 22.4R3\u2011S8, before 23.2R2\u2011S6, before 23.4R2\u2011S6, before 24.2R2\u2011S3, before 24.4R2, and before 25.2R2 are vulnerable; newer releases contain the fix.", "description_and_impact": "The vulnerability is a Missing Authentication for Critical Function flaw in Juniper Networks Junos OS. It allows a privileged local attacker to issue commands that bypass required authentication, which results in root access on the Linux-based Forwarding Plane Card. As root, the attacker could alter the FPC environment or affect packet forwarding, thereby compromising the device\u2019s confidentiality, integrity, and availability. The weakness is classified as CWE-306.", "risk_and_exploitability": "The CVSS score of 8.4 indicates high severity, while the EPSS score of less than 1\u202f% points to a low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attacker needs local privileged access, typically through console or authenticated SSH, to issue commands that bypass authentication and gain root on the FPC. The local nature of the attack coupled with the resulting full root on a critical component means that, once an attacker can run privileged commands, the threat vector can lead directly to compromise of device configuration and forwarding behaviour."}}}}, "created": "2026-04-08T19:59:40.798168+00:00", "updated": "2026-04-14T16:38:12.683167+00:00", "vendors": ["juniper_networks", "juniper_networks$PRODUCT$junos_os"]}