CVE-2025-52980 Details
Description
A Use of Incorrect Byte Ordering vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on SRX300 Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When a BGP update is received over an established BGP session which contains a specific, valid, optional, transitive path attribute, rpd will crash and restart. This issue affects eBGP and iBGP over IPv4 and IPv6. This issue affects: Junos OS: * 22.1 versions from 22.1R1 before 22.2R3-S4, * 22.3 versions before 22.3R3-S3, * 22.4 versions before 22.4R3-S2, * 23.2 versions before 23.2R2, * 23.4 versions before 23.4R2.
A denial-of-service vulnerability has been identified in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on SRX300 Series. This vulnerability allows an unauthenticated, network-based attacker to cause rpd to crash and restart. The issue arises when a BGP update containing a specific, valid, optional, transitive path attribute is received over an established BGP session. This vulnerability affects both eBGP and iBGP over IPv4 and IPv6.
Users can upgrade to Junos OS versions 22.2R3-S4, 22.3R3-S3, 22.4R3-S2, 23.2R2, 23.4R2, 24.2R1, or any subsequent release. Instructions for upgrading can be found on the Juniper Networks Customer Support website.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 11, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://supportportal.juniper.net/JSA100084 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-198 | Use of Incorrect Byte Ordering | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| juniper junos | 22.1 r1 22.1 r1-s1 22.1 r1-s2 22.1 r2 22.1 r2-s1 22.1 r2-s2 22.1 r3 22.1 r3-s1 22.1 r3-s2 22.1 r3-s3 22.3 - 22.3 r1 22.3 r1-s1 22.3 r1-s2 22.3 r2 22.3 r2-s1 22.3 r2-s2 22.3 r3 22.3 r3-s1 22.3 r3-s2 22.4 - 22.4 r1 22.4 r1-s1 22.4 r1-s2 22.4 r2 22.4 r2-s1 22.4 r2-s2 22.4 r3 22.4 r3-s1 23.2 - 23.2 r1 23.2 r1-s1 23.2 r1-s2 23.4 - 23.4 r1 23.4 r1-s1 23.4 r1-s2 |
CPE
Remediation
| |
| juniper srx300 | All versions |
CPE
Remediation
| |
| juniper srx320 | All versions |
CPE
Remediation
| |
| juniper srx340 | All versions |
CPE
Remediation
| |
| juniper srx345 | All versions |
CPE
Remediation
| |
| juniper srx380 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 23, 2026 | Initial Analysis | [email protected] |
| Jul 11, 2025 | New CVE Received | [email protected] |