Improper Check for Unusual or Exceptional Conditions in Junos OS Evolved - CVE-2025-59958
Published: October 13, 2025
Vulnerability identifier: #VU116938
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-59958
CWE-ID: CWE-754
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack or gain access to sensitive information.
The vulnerability exists due to improper error handling in the Packet Forwarding Engine (PFE). When an output firewall filter is configured with one or more terms where the action is 'reject', packets matching these terms are erroneously sent to the Routing Engine (RE) and further processed there. Processing of these packets will consume limited RE resources. Also responses from the RE back to the source of this traffic could reveal confidential information about the affected device.
Affected software
Junos OS Evolved
How to mitigate CVE-2025-59958
Install updates from vendor's website.
Junos OS Evolved - addressed in versions 22.4R3-EVO, 23.2R2-EVO, 23.4R1-EVO