What is the CVSS score of CVE-2025-52953?

CVE-2025-52953 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Junos are affected by CVE-2025-52953?

CVE-2025-52953 presents notable security risk rated CVSS 6.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-52953?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Junos CVE-2025-52953

EUVD-2025-21156 MEDIUM

Expected Behavior Violation (CWE-440)

2025-07-11 sirt@juniper.net

Denial Of Service Juniper Junos Junos Os Evolved

6.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

24.4R1-S3-EVO,24.2R2-EVO,24.4R1-S3

EUVD ID Assigned

Mar 16, 2026 - 08:17 euvd

EUVD-2025-21156

Analysis Generated

Mar 16, 2026 - 08:17 vuln.today

CVE Published

Jul 11, 2025 - 15:15 nvd

MEDIUM 6.5

DescriptionNVD

An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sending a valid BGP UPDATE packet to cause a BGP session reset, resulting in a Denial of Service (DoS).

Continuous receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.

This issue affects iBGP and eBGP and both IPv4 and IPv6 are affected by this vulnerability.

This issue affects Junos OS:

All versions before 21.2R3-S9,
from 21.4 before 21.4R3-S11,
from 22.2 before 22.2R3-S7,
from 22.4 before 22.4R3-S7,
from 23.2 before 23.2R2-S4,
from 23.4 before 23.4R2-S4,
from 24.2 before 24.2R2,
from 24.4 before 24.4R1-S3, 24.4R2

Junos OS Evolved:

All versions before 22.2R3-S7-EVO,
from 22.4-EVO before 22.4R3-S7-EVO,
from 23.2-EVO before 23.2R2-S4-EVO,
from 23.4-EVO before 23.4R2-S4-EVO,
from 24.2-EVO before 24.2R2-EVO,
from 24.4-EVO before 24.4R1-S3-EVO, 24.4R2-EVO.

Analysis

Continuous receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.

This issue affects iBGP and eBGP and both IPv4 and IPv6 are affected by this vulnerability.

This issue affects Junos OS:

All versions before 21.2R3-S9,
from 21.4 before 21.4R3-S11,
from 22.2 before 22.2R3-S7,
from 22.4 before 22.4R3-S7,
from 23.2 before 23.2R2-S4,
from 23.4 before 23.4R2-S4,
from 24.2 before 24.2R2,
from 24.4 before 24.4R1-S3, 24.4R2

Junos OS Evolved:

All versions before 22.2R3-S7-EVO,
from 22.4-EVO before 22.4R3-S7-EVO,
from 23.2-EVO before 23.2R2-S4-EVO,
from 23.4-EVO before 23.4R2-S4-EVO,
from 24.2-EVO before 24.2R2-EVO,
from 24.4-EVO before 24.4R1-S3-EVO, 24.4R2-EVO.

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Expected Behavior Violation (CWE-440).

RemediationAI

Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.

More from same product – last 7 days

CVE-2026-48687 CRITICAL Act Now

9.8 May 26

OS command injection in FastNetMon Community Edition (through 1.2.9) lets attacker-controlled input reach an unescaped e

CVE-2025-52953 vulnerability details – vuln.today

Back

Junos CVE-2025-52953

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

Analysis

Technical ContextAI

RemediationAI

More from same product – last 7 days

Share

External POC / Exploit Code