CVE-2025-52980

HIGH EPSS 36.4%

Published Jul 11, 202511mo ago · Modified Jun 17, 20261w ago

8.7 CVSS 4.0

High

Published Jul 11, 2025 11mo ago

Last Modified Jun 17, 2026 1w ago

Description

A Use of Incorrect Byte Ordering vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on SRX300 Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When a BGP update is received over an established BGP session which contains a specific, valid, optional, transitive path attribute, rpd will crash and restart. This issue affects eBGP and iBGP over IPv4 and IPv6. This issue affects: Junos OS: * 22.1 versions from 22.1R1 before 22.2R3-S4, * 22.3 versions before 22.3R3-S3, * 22.4 versions before 22.4R3-S2, * 23.2 versions before 23.2R2, * 23.4 versions before 23.4R2.

CVSS Details

Base Score

8.7

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

36.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-198

Affected Products 42

Vendor	Product	Version	Range
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.1	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.3	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	22.4	any
juniper	junos	23.2	any
juniper	junos	23.2	any
juniper	junos	23.2	any
juniper	junos	23.2	any
juniper	junos	23.4	any
juniper	junos	23.4	any
juniper	junos	23.4	any
juniper	junos	23.4	any
juniper	srx300	*	any
juniper	srx320	*	any
juniper	srx340	*	any
juniper	srx345	*	any
juniper	srx380	*	any

References 1

supportportal.juniper.net https://supportportal.juniper.net/JSA100084

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.