CVE-2025-60004

Published Oct 9, 2025

Last updated a month ago

CVSS high 8.7

Bgp

Overview

Description: An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-Of-Service (DoS). When an affected system receives a specific BGP EVPN update message over an established BGP session, this causes an rpd crash and restart. A BGP EVPN configuration is not necessary to be vulnerable. If peers are not configured to send BGP EVPN updates to a vulnerable device, then this issue can't occur. This issue affects iBGP and eBGP, over IPv4 and IPv6. This issue affects: Junos OS: * 23.4 versions from 23.4R2-S3 before 23.4R2-S5, * 24.2 versions from 24.2R2 before 24.2R2-S1, * 24.4 versions before 24.4R1-S3, 24.4R2; Junos OS Evolved: * 23.4-EVO versions from 23.4R2-S2-EVO before 23.4R2-S5-EVO, * 24.2-EVO versions from 24.2R2-EVO before 24.2R2-S1-EVO, * 24.4-EVO versions before 24.4R1-S3-EVO, 24.4R2-EVO.
Source: sirt@juniper.net
NVD status: Analyzed
Products: junos, junos_os_evolved

Risk scores

CVSS 4.0

Type: Secondary
Base score: 8.7
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X
Severity: HIGH

CVSS 3.1

Type: Secondary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH

Weaknesses

sirt@juniper.net: CWE-754

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId": "A7C207E3-0252-4192-8E8C-E2ED2831B4F4",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId": "E6974492-FE69-4340-8881-61C3329C1545",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId": "266B520A-482A-43F7-90F8-B9D64D30034F",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId": "C452BDCB-34E3-42D3-8909-2312356EB70A",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId": "2B8158F2-2028-40E9-955F-CFD581A32F60",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId": "1A7233A1-EC7A-4458-9AE1-835480A03A21",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId": "0EEF1798-F3C2-4645-96E7-1E82368B184D",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId": "EB2FE5FE-0ADE-406E-A23D-FDCC104B2496",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId": "2E58987A-D7B7-4FFF-9969-E8FD76AE2BE3",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId": "E779C0D4-A8F7-4976-B3C8-B9802B96E715",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2:*:*:*:*:*:*",
            "matchCriteriaId": "080BEA58-9667-4C2C-810D-DC1187DB67DA",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:-:*:*:*:*:*:*",
            "matchCriteriaId": "B32ADA05-5F5D-45B6-BB7B-3FA6A6F229F5",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1:*:*:*:*:*:*",
            "matchCriteriaId": "D6526E82-A6A6-4A65-9B01-B3FCB947F44E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId": "CF3B74FA-DF84-4E3E-BCF9-44EEF9E45910",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2:*:*:*:*:*:*",
            "matchCriteriaId": "25DA0DD2-E974-448C-BD05-ED6FCA4725FB",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 4.0

CVSS 3.1

Weaknesses

Social media

Configurations

Related CVEs

References