{"id":5698,"date":"2025-02-18T13:27:07","date_gmt":"2025-02-18T13:27:07","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/juniper-router-vulnerability-allows-auth-bypass\/"},"modified":"2025-02-18T13:27:08","modified_gmt":"2025-02-18T13:27:08","slug":"juniper-router-vulnerability-allows-auth-bypass","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/juniper-router-vulnerability-allows-auth-bypass\/","title":{"rendered":"Juniper Router Vulnerability Allows Auth Bypass"},"content":{"rendered":"\n<\/p>\n
\n

\ue802<\/i>February 18, 2025<\/span>\ue804<\/i>Ravie Lakshmanan<\/span><\/span>Vulnerability \/ Network Security<\/span><\/p>\n<\/div>\n

\n
\n<\/p>\n

<\/a>\n<\/div>\n

Juniper Networks has issued security updates to address a critical security vulnerability affecting its Session Smart Router, Session Smart Conductor, and WAN Assurance Router products. This vulnerability could potentially allow attackers to gain control of vulnerable devices.<\/p>\n

The vulnerability is identified as CVE-2025-21589<\/strong> and has been assigned a CVSS v3.1 score of 9.8 and a CVSS v4 score of 9.3.<\/p>\n

According to Juniper Networks, “an Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allow a network-based attacker to bypass authentication and take administrative control of the device.” The company provided this information in a recent advisory<\/a>.<\/p>\n

The following products and versions are affected by this vulnerability:<\/p>\n