cyber.hendryadrian.com

CVE

CVE-2025-21590

First Reported
Oct 20, 2026
Latest Reported
Oct 20, 2026
Articles
1
View articles →
IOC
0
View indicators →

CVE Enrichment

CVSS
6.7 MEDIUM
EPSS
1.74%
EPSS Percentile
77.35%
CISA KEV
YES — Known Exploited Vulnerability

Description

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device. This issue is not exploitable from the Junos CLI. This issue affects Junos OS: * All versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R1-S2, 24.2R2.

Technical Details

CVSS Version
4.0
CNA / NVD Source
sirt@juniper.net
Published
12-Mar-2025 21:15
Last Modified
02-Oct-2026 01:23
EPSS Date
2026-10-20
CWE
CWE-653

CVSS Vector

CVSS:4.0 AV:L / AC:L / AT:N / PR:H / UI:N / VC:N / VI:H / VA:N / SC:N / SI:N / SA:N / E:X / CR:X / IR:X / AR:X / MAV:X / MAC:X / MAT:X / MPR:X / MUI:X / MVC:X / MVI:X / MVA:X / MSC:X / MSI:X / MSA:X / S:X / AU:X / R:X / V:X / RE:X / U:X

CISA KEV Details

Date Added
2025-03-13
Remediation Due
2025-04-03
Known Ransomware Campaign Use
Unknown
Required Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes
https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-21590

Affected Products / Versions

References

Last enrichment sync: 21-Oct-2026 03:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE (13)

CVE-2024-217621 related articleCVE-2024-407661 related articleCVE-2024-555911 related articleCVE-2025-02821 related articleCVE-2025-224571 related articleCVE-2025-244721 related articleCVE-2025-32481 related articleCVE-2025-497041 related articleCVE-2025-497061 related articleCVE-2025-537701 related article

VIEW MORE

Malware (10)

Akira1 related articleBRICKSTORM1 related articleLAMEHUG1 related articleLumma1 related articlePlugX1 related articleQilin1 related articleRedLine1 related articleShadowPad1 related articleSPAWN1 related articleSuperBlack1 related article

People (10)

ALEXANDRA GOFMAN1 related articleELI SMADJA1 related articleJONATHAN FISCHBEI1 related articleLotem Finkelstein1 related articleMarco Rubio1 related articleMICHAEL ABRAMZON1 related articleMICHAEL GREENBERG1 related articleOMER DEMBINSKY1 related articleSERGEY SHYKEVICH1 related articleYOAV ARAD PINKAS1 related article

Threat Actors (27)

0ktapus1 related articleAPT281 related articleARMORY CASTLE1 related articleCl0p1 related articleEarth Lamia1 related articleEducated Manticore1 related articleFunkSec1 related articleGTG-10021 related articleInkDragon1 related articleJackpot Panda1 related article

VIEW MORE

MITRE ATT&CK (15)

T1021.0011 related articleT10401 related articleT10781 related articleT11901 related articleT1204.0021 related articleT14851 related articleT14861 related articleT15281 related articleT15391 related articleT1562.0011 related article

VIEW MORE

Vendors (10)

Anthropic1 related articleCisco1 related articleF5 Networks1 related articleFortinet1 related articleGoogle1 related articleIvanti1 related articleJuniper Networks1 related articleMicrosoft1 related articleOpenAI1 related articleSonicWall1 related article

Products (15)

Cisco ASA-5500-X1 related articleClaude Code1 related articleCodex CLI1 related articleCursor1 related articleESXi1 related articleFortiOS1 related articleFortiProxy1 related articleIvanti Connect Secure1 related articleJunos OS1 related articleLangflow1 related article

VIEW MORE

Tools (3)

DeepFaceLive1 related articleIUAM ClickFix Generator1 related articleXanthorox1 related article

Industries (10)

Agriculture1 related articleAutomotive1 related articleEducation1 related articleEnergy & Utilities1 related articleFinancial Services1 related articleGovernment1 related articleHardware & Semiconductors1 related articleHealthcare & Medical1 related articleIndustrial Manufacturing1 related articleTelecommunications1 related article

Countries (10)

China1 related articleIndia1 related articleIran1 related articleIsrael1 related articleNorth Korea1 related articleRussia1 related articleTaiwan1 related articleUkraine1 related articleUnited Kingdom1 related articleUnited States1 related article

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.