CVE-2025-52989
Severity CVSS v4.0:
MEDIUM
Type:
Unavailable / Other
Publication date:
11/07/2025
Last modified:
11/07/2025
Description
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.<br />
<br />
<br />
<br />
A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.<br />
<br />
<br />
<br />
<br />
This issue affects:<br />
<br />
Junos OS: <br />
<br />
<br />
<br />
* all versions before 22.2R3-S7,<br />
* 22.4 versions before 22.4R3-S7,<br />
* 23.2 versions before 23.2R2-S4,<br />
* 23.4 versions before 23.4R2-S4,<br />
* 24.2 versions before 24.2R2-S1,<br />
* 24.4 versions before 24.4R1-S2, 24.4R2;<br />
<br />
<br />
<br />
<br />
Junos OS Evolved:<br />
<br />
<br />
<br />
* all versions before 22.4R3-S7-EVO,<br />
* 23.2-EVO versions before 23.2R2-S4-EVO,<br />
* 23.4-EVO versions before 23.4R2-S5-EVO, <br />
* 24.2-EVO versions before 24.2R2-S1-EVO<br />
<br />
<br />
<br />
* 24.4-EVO versions before 24.4R2-EVO.
Impact
Base Score 4.0
6.80
Severity 4.0
MEDIUM
Base Score 3.x
5.10
Severity 3.x
MEDIUM