Juniper Networks Junos OS up to 23.4R1 on SRX Command-Line Interface information disclosure

Summaryinfo

A vulnerability classified as problematic has been found in Juniper Networks Junos OS up to 23.4R1 on SRX. This vulnerability affects unknown code of the component Command-Line Interface. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2025-21592. The attack can only be performed from a local environment. No exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Juniper Networks Junos OS up to 23.4R1 on SRX and classified as problematic. This issue affects some unknown processing of the component Command-Line Interface. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. The summary by CVE is:

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface (CLI) of Juniper Networks Junos OS on SRX Series devices allows a local, low-privileged user with access to the Junos CLI to view the contents of sensitive files on the file system. Through the execution of either 'show services advanced-anti-malware' or 'show services security-intelligence' command, a user with limited permissions (e.g., a low privilege login class user) can access protected files that should not be accessible to the user. These files may contain sensitive information that can be used to cause further impact to the system. This issue affects Junos OS SRX Series: * All versions before 21.4R3-S8, * from 22.2 before 22.2R3-S5, * from 22.3 before 22.3R3-S3, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2-S1, * from 23.4 before 23.4R2.

It is possible to read the advisory at supportportal.juniper.net. The identification of this vulnerability is CVE-2025-21592 since 12/26/2024. The exploitation is known to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 310768 (Juniper Junos OS Vulnerability (JSA92860)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S2, 23.2R2-S1 or 23.4R2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (310768). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Juniper Networks

Name

• Junos OS

Version

• 21.4R3-S7
• 22.2R3-S4
• 22.3R3-S2
• 22.4R3-S1
• 23.2R2-S0
• 23.4R1

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion