CVE-2025-21589 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass…
Critical CVSS: 9.3

CVE-2025-21589

An Authentication Bypass Using an
Alternate Path or Channel vulnerability in Juniper Networks Session Smart
Router may allows a network-based attacker to bypass authentication
and take administrative control of the device.

This issue affects Session Smart Router: 



* from 5.6.7 before 5.6.17, 
* from 6.0 before 6.0.8 (affected from 6.0.8),

* from 6.1 before 6.1.12-lts, 
* from 6.2 before 6.2.8-lts, 
* from 6.3 before 6.3.3-r2; 




This issue affects Session Smart Conductor: 



* from 5.6.7 before 5.6.17, 
* from 6.0 before 6.0.8 (affected from 6.0.8),

* from 6.1 before 6.1.12-lts, 
* from 6.2 before 6.2.8-lts, 
* from 6.3 before 6.3.3-r2; 




This issue affects WAN Assurance Managed Routers: 



* from 5.6.7 before 5.6.17, 
* from 6.0 before 6.0.8 (affected from 6.0.8),

* from 6.1 before 6.1.12-lts, 
* from 6.2 before 6.2.8-lts, 
* from 6.3 before 6.3.3-r2.
Vendor
-
Product
-
CWE
CWE-288
Yayın Tarihi
2026-01-27 21:15:56
Güncelleme
2026-01-29 16:31:35
Source Identifier
sirt@juniper.net
KEV Date Added
-

Kategoriler

Referanslar