Juniper Networks Junos OS up to 23.4R2 on SRX pem Command exceptional condition

Summaryinfo

A vulnerability labeled as problematic has been found in Juniper Networks Junos OS up to 23.4R2 on SRX. This vulnerability affects unknown code of the component pem Command Handler. Executing a manipulation can lead to exceptional condition. This vulnerability is handled as CVE-2025-21596. It is possible to launch the attack on the local host. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Juniper Networks Junos OS up to 23.4R2 on SRX. It has been declared as problematic. This vulnerability affects an unknown part of the component pem Command Handler. The manipulation with an unknown input leads to a exceptional condition vulnerability. The CWE definition for the vulnerability is CWE-755. The product does not handle or incorrectly handles an exceptional condition. As an impact it is known to affect availability. CVE summarizes:

An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on SRX1500, SRX4100, and SRX4200 devices allows a local, low-privileged authenticated attacker executing the 'show chassis environment pem' command to cause the chassis daemon (chassisd) to crash and restart, resulting in a temporary Denial of Service (DoS). However, repeated execution of this command will eventually cause the chassisd process to fail to restart, impacting packet processing on the system. This issue affects Junos OS on SRX1500, SRX4100, SRX4200:  * All versions before 21.4R3-S9,  * from 22.2 before 22.2R3-S5,  * from 22.3 before 22.3R3-S4,  * from 22.4 before 22.4R3-S4,  * from 23.2 before 23.2R2-S3,  * from 23.4 before 23.4R2-S1.

The advisory is available at supportportal.juniper.net. This vulnerability was named CVE-2025-21596 since 12/26/2024. The exploitation appears to be easy. Local access is required to approach this attack. The technical details are unknown and an exploit is not available.

The vulnerability scanner Nessus provides a plugin with the ID 310765 (Juniper Junos OS Vulnerability (JSA92864)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S4, 23.2R2-S3 or 23.4R2-S1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (310765). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Juniper Networks

Name

• Junos OS

Version

• 21.4R3-S8
• 22.2R3-S4
• 22.3R3-S3
• 22.4R3-S3
• 23.2R2-S2
• 23.4R2

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion