CVE-2025-59968

HIGH EPSS 19.5%
Published Oct 9, 20258mo ago · Modified Jun 17, 20262w ago
7.7 CVSS 4.0
High
Find Similar
Published Oct 9, 2025 8mo ago
Last Modified Jun 17, 2026 2w ago

Description

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface.  Tampering with this metadata can result in managed SRX Series devices permitting network traffic that should otherwise be blocked by policy, effectively bypassing intended security controls. This issue affects Junos Space Security Director * all versions prior to 24.1R3 Patch V4 This issue does not affect managed cSRX Series devices.

CVSS Details

Base Score
7.7
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Green
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
19.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-862 Missing Authorization Authorization

Affected Products 22

VendorProductVersionRange
juniperspace_security_director* <24.1
juniperspace_security_director24.1any
juniperspace_security_director24.1any
juniperspace_security_director24.1any
junipervsrx*any
junipersrx1500*any
junipersrx1600*any
junipersrx2300*any
junipersrx300*any
junipersrx320*any
junipersrx340*any
junipersrx345*any
junipersrx380*any
junipersrx4100*any
junipersrx4120*any
junipersrx4200*any
junipersrx4300*any
junipersrx4600*any
junipersrx4700*any
junipersrx5400*any
junipersrx5600*any
junipersrx5800*any

References 2

  • supportportal.juniper.net https://supportportal.juniper.net/JSA103157
    Vendor Advisory
  • juniper.net https://www.juniper.net/documentation/us/en/software/nm-apps24.1/junos-space-security-director/topics/task/junos-space-metadata-creating.html
    Technical Description

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.