CVE-2025-52989
EUVD-2025-2114311.07.2025, 16:15
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration. A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration. This issue affects: Junos OS: * all versions before 22.2R3-S7, * 22.4 versions before 22.4R3-S7, * 23.2 versions before 23.2R2-S4, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R2-S1, * 24.4 versions before 24.4R1-S2, 24.4R2; Junos OS Evolved: * all versions before 22.4R3-S7-EVO, * 23.2-EVO versions before 23.2R2-S4-EVO, * 23.4-EVO versions before 23.4R2-S5-EVO, * 24.2-EVO versions before 24.2R2-S1-EVO * 24.4-EVO versions before 24.4R2-EVO.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| juniper | junos | 𝑥 < 22.2 |
| juniper | junos | 22.2 |
| juniper | junos | 22.2:r1 |
| juniper | junos | 22.2:r1-s1 |
| juniper | junos | 22.2:r1-s2 |
| juniper | junos | 22.2:r2 |
| juniper | junos | 22.2:r2-s1 |
| juniper | junos | 22.2:r2-s2 |
| juniper | junos | 22.2:r3 |
| juniper | junos | 22.2:r3-s1 |
| juniper | junos | 22.2:r3-s2 |
| juniper | junos | 22.2:r3-s3 |
| juniper | junos | 22.2:r3-s4 |
| juniper | junos | 22.2:r3-s5 |
| juniper | junos | 22.2:r3-s6 |
| juniper | junos | 22.4 |
| juniper | junos | 22.4:r1 |
| juniper | junos | 22.4:r1-s1 |
| juniper | junos | 22.4:r1-s2 |
| juniper | junos | 22.4:r2 |
| juniper | junos | 22.4:r2-s1 |
| juniper | junos | 22.4:r2-s2 |
| juniper | junos | 22.4:r3 |
| juniper | junos | 22.4:r3-s1 |
| juniper | junos | 22.4:r3-s2 |
| juniper | junos | 22.4:r3-s3 |
| juniper | junos | 22.4:r3-s4 |
| juniper | junos | 22.4:r3-s5 |
| juniper | junos | 22.4:r3-s6 |
| juniper | junos | 23.2 |
| juniper | junos | 23.2:r1 |
| juniper | junos | 23.2:r1-s1 |
| juniper | junos | 23.2:r1-s2 |
| juniper | junos | 23.2:r2 |
| juniper | junos | 23.2:r2-s1 |
| juniper | junos | 23.2:r2-s2 |
| juniper | junos | 23.2:r2-s3 |
| juniper | junos | 23.4 |
| juniper | junos | 23.4:r1 |
| juniper | junos | 23.4:r1-s1 |
| juniper | junos | 23.4:r1-s2 |
| juniper | junos | 23.4:r2 |
| juniper | junos | 23.4:r2-s1 |
| juniper | junos | 23.4:r2-s2 |
| juniper | junos | 23.4:r2-s3 |
| juniper | junos | 24.2 |
| juniper | junos | 24.2:r1 |
| juniper | junos | 24.2:r1-s1 |
| juniper | junos | 24.2:r1-s2 |
| juniper | junos | 24.2:r2 |
| juniper | junos | 24.4 |
| juniper | junos | 24.4:r1 |
| juniper | junos | 24.4:r2 |
| juniper | junos_os_evolved | 𝑥 < 22.4 |
| juniper | junos_os_evolved | 22.4 |
| juniper | junos_os_evolved | 22.4:r1 |
| juniper | junos_os_evolved | 22.4:r1-s1 |
| juniper | junos_os_evolved | 22.4:r1-s2 |
| juniper | junos_os_evolved | 22.4:r2 |
| juniper | junos_os_evolved | 22.4:r2-s1 |
| juniper | junos_os_evolved | 22.4:r2-s2 |
| juniper | junos_os_evolved | 22.4:r3 |
| juniper | junos_os_evolved | 22.4:r3-s1 |
| juniper | junos_os_evolved | 22.4:r3-s2 |
| juniper | junos_os_evolved | 22.4:r3-s3 |
| juniper | junos_os_evolved | 22.4:r3-s4 |
| juniper | junos_os_evolved | 22.4:r3-s5 |
| juniper | junos_os_evolved | 22.4:r3-s6 |
| juniper | junos_os_evolved | 23.2 |
| juniper | junos_os_evolved | 23.2:r1 |
| juniper | junos_os_evolved | 23.2:r1-s1 |
| juniper | junos_os_evolved | 23.2:r1-s2 |
| juniper | junos_os_evolved | 23.2:r2 |
| juniper | junos_os_evolved | 23.2:r2-s1 |
| juniper | junos_os_evolved | 23.2:r2-s2 |
| juniper | junos_os_evolved | 23.2:r2-s3 |
| juniper | junos_os_evolved | 23.4 |
| juniper | junos_os_evolved | 23.4:r1 |
| juniper | junos_os_evolved | 23.4:r1-s1 |
| juniper | junos_os_evolved | 23.4:r1-s2 |
| juniper | junos_os_evolved | 23.4:r2 |
| juniper | junos_os_evolved | 23.4:r2-s1 |
| juniper | junos_os_evolved | 23.4:r2-s2 |
| juniper | junos_os_evolved | 23.4:r2-s3 |
| juniper | junos_os_evolved | 23.4:r2-s4 |
| juniper | junos_os_evolved | 24.2 |
| juniper | junos_os_evolved | 24.2:r1 |
| juniper | junos_os_evolved | 24.2:r1-s2 |
| juniper | junos_os_evolved | 24.2:r2 |
| juniper | junos_os_evolved | 24.4 |
| juniper | junos_os_evolved | 24.4:r1 |
| juniper | junos_os_evolved | 24.4:r1-s2 |
| juniper | junos_os_evolved | 24.4:r1-s3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration