CVE-2025-52988

published 2025-07-11

CVE-2025-52988: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS and Junos…

high 8.4 CVSS 4.0

AV L AC L AT N PR H UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU Y R U V X RE M U X

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a high privileged, local attacker to escalated their privileges to root.

When a user provides specifically crafted arguments to the 'request system logout' command, these will be executed as root on the shell, which can completely compromise the device.
This issue affects:

Junos OS:

* all versions before 21.2R3-S9,
* 21.4 versions before 21.4R3-S8,
* 22.2 versions before 22.2R3-S6,
* 22.3 versions before 22.3R3-S3,
* 22.4 versions before 22.4R3-S6,
* 23.2 versions before 23.2R2-S1,
* 23.4 versions before 23.4R1-S2, 23.4R2;

Junos OS Evolved:

* all versions before 22.4R3-S6-EVO,
* 23.2-EVO versions before 23.2R2-S1-EVO,
* 23.4-EVO versions before 23.4R1-S2-EVO, 23.4R2-EVO.

Affected

23 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	< 21.2	21.2
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	junos_os_evolved	< 22.4	22.4
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper_networks	junos_os	< 21.2R3-S9	21.2R3-S9
juniper_networks	junos_os	>= 21.4 < 21.4R3-S8	21.4R3-S8
juniper_networks	junos_os	>= 22.2 < 22.2R3-S6	22.2R3-S6
juniper_networks	junos_os	>= 22.3 < 22.3R3-S3	22.3R3-S3
juniper_networks	junos_os	>= 22.4 < 22.4R3-S6	22.4R3-S6
juniper_networks	junos_os	>= 23.2 < 23.2R2-S1	23.2R2-S1
juniper_networks	junos_os	>= 23.4 < 23.4R1-S2, 23.4R2	23.4R1-S2, 23.4R2
juniper_networks	junos_os_evolved	< 22.4R3-S6-EVO	22.4R3-S6-EVO
juniper_networks	junos_os_evolved	>= 23.2-EVO < 23.2R2-S1-EVO	23.2R2-S1-EVO
juniper_networks	junos_os_evolved	>= 23.4-EVO < 23.4R1-S2-EVO, 23.4R2-EVO	23.4R1-S2-EVO, 23.4R2-EVO

CWE-78