What is the CVSS score of CVE-2025-30661?

CVE-2025-30661 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Junos are affected by CVE-2025-30661?

CVE-2025-30661 is a high-severity remote code execution vulnerability in Juniper Networks Junos OS that could allow local attackers to execute arbitrary code on line card systems.. A patch is available.

How to fix or mitigate CVE-2025-30661?

Within 24 hours: Identify all Juniper Junos OS deployments in your environment and document current versions. Within 7 days: Test vendor-released patch in a non-production environment and validate line card functionality post-update. Within 30 days: Deploy patch to all production Junos OS systems in a staged manner according to your change management process, prioritizing internet-facing and critical infrastructure devices.

Junos CVE-2025-30661

EUVD-2025-21165 HIGH

Incorrect Permission Assignment for Critical Resource (CWE-732)

2025-07-11 sirt@juniper.net

Juniper Privilege Escalation Junos

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:27 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

23.4R2-S5,24.4R1-S3,24.2R2-S1

EUVD ID Assigned

Mar 16, 2026 - 08:17 euvd

EUVD-2025-21165

Analysis Generated

Mar 16, 2026 - 08:17 vuln.today

CVE Published

Jul 11, 2025 - 15:15 nvd

HIGH 7.3

DescriptionCVE.org

An Incorrect Permission Assignment for Critical Resource vulnerability in line card script processing of Juniper Networks Junos OS allows a local, low-privileged user to install scripts to be executed as root, leading to privilege escalation.

A local user with access to the local file system can copy a script to the router in a way that will be executed as root, as the system boots. Execution of the script as root can lead to privilege escalation, potentially providing the adversary complete control of the system.

This issue only affects specific line cards, such as the MPC10, MPC11, LC4800, LC9600, MX304-LMIC16, SRX4700, and EX9200-15C.

This issue affects Junos OS: * from 23.2 before 23.2R2-S4,

from 23.4 before 23.4R2-S5,
from 24.2 before 24.2R2-S1,
from 24.4 before 24.4R1-S3, 24.4R2.

This issue does not affect versions prior to 23.1R2.

AnalysisAI

A remote code execution vulnerability in line card script processing of Juniper Networks Junos OS allows a local (CVSS 7.3). High severity vulnerability requiring prompt remediation.