Juniper Security Updates – 17 July 2025

Juniper has released security updates to fix several vulnerabilities affecting multiple Juniper Networks products.

The addressed vulnerabilities could allow the remote attacker to perform denial of service attacks, obtain sensitive information, gain elevated privileges, bypass security restrictions, execute arbitrary commands, and gain access to the affected
system.

Sample of the addressed vulnerabilities:

1. Juniper Networks Juniper Security Director Information Disclosure Vulnerability (CVE-2025-52950):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Obtain Information

2. Juniper Networks Junos OS and Junos OS Evolved Denial of Service Vulnerability (CVE-2025-52946):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

Affected Products:

  • Juniper Security Director 24.4.1.
  • Junos OS\ OS Evolved.
  • Junos OS MX Series.
  • Junos OS SRX300 Series.
  • Junos OS: ACX Series.
Vulnerabilities
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Juniper Security Advisory

References