Severity
Medium
Analysis Summary
CVE-2025-59958 CVSS:6.5
Juniper Networks Junos OS Evolved could allow a remote attacker to obtain sensitive information or cause a denial of service condition, caused by improper check for unusual or exceptional conditions in the Packet Forwarding Engine (PFE).
CVE-2025-60010 CVSS:5.4
Juniper Networks Junos OS and Junos OS Evolved could allow a remote authenticated attacker to access the device without enforcing the required password change, caused by a password aging flaw in the RADIUS client
Impact
- Information Disclosure
- Security Bypass
Indicators of Compromise
CVE
CVE-2025-59958
CVE-2025-60010
Affected Vendors
Juniper
Affected Products
- Juniper Networks Junos OS 22.4
- Juniper Networks Junos OS 23.2
- Juniper Networks Junos OS Evolved 23.2
- Juniper Networks Junos OS Evolved 22.4
- Juniper Networks Junos OS 23.4
- Juniper Networks Junos OS 24.2
Remediation
Refer to Juniper Networks Security Advisory for patch, upgrade or suggested workaround information.