Juniper Junos Space CVE-2025-59975

No special conditions - remote unauthenticated exploitation against network-reachable httpd/API of Junos Space (PR:N/UI:N/AC:L). The practical requirement is reachability to the management HTTP daemon and the ability to sustain a continuous high volume of inbound connection requests; a brief burst is insufficient since the condition is file-handle exhaustion under continuous flooding. Limiting factors: impact is confined to management-plane availability (no data compromise or code execution), exploitation is substantially mitigated when the Junos Space management interface is restricted to a trusted administrative network or behind rate-limiting/ACLs, and the device self-restores only after a manual reboot by an operator.

This is a genuine but bounded availability risk. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms a network-reachable, low-complexity, unauthenticated attack requiring no user interaction, which is the worst case for accessibility - anyone who can reach the httpd/API port can attempt it. However, impact is strictly availability (VC:N/VI:N/VA:H); there is no confidentiality or integrity loss and no code execution, so this is a pure DoS rather than a system-compromise flaw. The EPSS score of 0.41% (33rd percentile) indicates low modeled exploitation probability, and there is no CISA KEV listing and no public exploit identified, so there is no evidence of active or opportunistic exploitation at this time. Signals are therefore consistent rather than conflicting: high theoretical accessibility but low observed/impactful real-world risk. The vendor-assigned 8.7 score is driven largely by the automatable, unauthenticated nature plus the fact that recovery requires manual operator intervention (a reboot), not by any data-loss or RCE potential. Prioritize patching for internet- or untrusted-network-exposed Junos Space management instances; de-prioritize relative to RCE/credential CVEs if the management interface is already restricted to a trusted administrative network.

An attacker with network reachability to a Junos Space management instance scripts a sustained flood of inbound HTTP API connection requests against httpd. The connections exhaust all available file handles, which blocks legitimate SSH and WebUI access and renders the management plane unavailable until an operator manually reboots the appliance. No public exploit code is identified, but the attack requires only commodity connection-flooding tooling given the unauthenticated, low-complexity vector.