CVE-2025-52989
Gravedad CVSS v4.0:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
11/07/2025
Última modificación:
11/07/2025
Descripción
*** Pendiente de traducción *** An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.<br />
<br />
<br />
<br />
A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.<br />
<br />
<br />
<br />
<br />
This issue affects:<br />
<br />
Junos OS: <br />
<br />
<br />
<br />
* all versions before 22.2R3-S7,<br />
* 22.4 versions before 22.4R3-S7,<br />
* 23.2 versions before 23.2R2-S4,<br />
* 23.4 versions before 23.4R2-S4,<br />
* 24.2 versions before 24.2R2-S1,<br />
* 24.4 versions before 24.4R1-S2, 24.4R2;<br />
<br />
<br />
<br />
<br />
Junos OS Evolved:<br />
<br />
<br />
<br />
* all versions before 22.4R3-S7-EVO,<br />
* 23.2-EVO versions before 23.2R2-S4-EVO,<br />
* 23.4-EVO versions before 23.4R2-S5-EVO, <br />
* 24.2-EVO versions before 24.2R2-S1-EVO<br />
<br />
<br />
<br />
* 24.4-EVO versions before 24.4R2-EVO.
Impacto
Puntuación base 4.0
6.80
Gravedad 4.0
MEDIA
Puntuación base 3.x
5.10
Gravedad 3.x
MEDIA