CVE-2025-52963: Junos OS: A low-privileged user can disable an interface
An Improper Access Control vulnerability in the User Interface (UI) of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an interface, leading to a Denial-of-Service.
Users with "view" permissions can run a specific request interface command which allows the user to shut down the interface. This issue affects Junos OS:
All versions before 21.2R3-S9, from 21.4 before 21.4R3-S11, from 22.2 before 22.2R3-S7, from 22.4 before 22.4R3-S7, from 23.2 before 23.2R2-S4, from 23.4 before 23.4R2-S5, from 24.2 before 24.2R2-S1, from 24.4 before 24.4R1-S3, 24.4R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52963?
The severity of CVE-2025-52963 is considered high due to its potential to cause Denial-of-Service by low-privileged users.
How do I fix CVE-2025-52963?
To fix CVE-2025-52963, upgrade your Juniper Networks Junos OS to version 21.2R3-S10 or later.
What impact does CVE-2025-52963 have on my network?
CVE-2025-52963 can allow low-privileged attackers to disable interfaces, leading to service disruptions in your network.
Who is affected by CVE-2025-52963?
Users with 'view' permissions on Juniper Networks Junos OS versions before 21.2R3-S10 are affected by CVE-2025-52963.
What type of vulnerability is CVE-2025-52963?
CVE-2025-52963 is an Improper Access Control vulnerability specifically affecting the User Interface of Junos OS.