CVE-2025-30650

CWE-306 — Missing Authentication2 documents2 sources

Severity

8.4HIGH

EPSS

0.0%

top 95.37%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Juniper Networks Junos OS

Timeline

PublishedApr 8

Description

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to line cards running Junos OS Evolved as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards include: * MPC7, MPC8, MPC9, MPC10, MPC11 * LC2101, LC2103 * LC480, LC4800, LC9600 * MX304 (built-in FPC) * MX-SPC3 * SRX5K-SPC3 * EX9200-40XS * FPC3-PTX-U2, FPC3-PTX-U3 * FPC3-SFF-PTX * LC110…

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Affected Packages1 packages

▶CVEListV5juniper_networks/junos_os23.2 — 23.2R2-S6+5

🔴Vulnerability Details

CVEList

Junos OS: Privileged local user can gain access to a Linux-based FPC as root↗2026-04-08

▶