CVE-2025-52989
Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.
A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.
This issue affects:
Junos OS:
- all versions before 22.2R3-S7,
- 22.4 versions before 22.4R3-S7,
- 23.2 versions before 23.2R2-S4,
- 23.4 versions before 23.4R2-S4,
- 24.2 versions before 24.2R2-S1,
- 24.4 versions before 24.4R1-S2, 24.4R2;
Junos OS Evolved:
-
all versions before 22.4R3-S7-EVO,
-
23.2-EVO versions before 23.2R2-S4-EVO,
-
23.4-EVO versions before 23.4R2-S5-EVO,
-
24.2-EVO versions before 24.2R2-S1-EVO
-
24.4-EVO versions before 24.4R2-EVO.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.
A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.
This issue affects:
Junos OS:
- all versions before 22.2R3-S7,
- 22.4 versions before 22.4R3-S7,
- 23.2 versions before 23.2R2-S4,
- 23.4 versions before 23.4R2-S4,
- 24.2 versions before 24.2R2-S1,
- 24.4 versions before 24.4R1-S2, 24.4R2;
Junos OS Evolved:
-
all versions before 22.4R3-S7-EVO,
-
23.2-EVO versions before 23.2R2-S4-EVO,
-
23.4-EVO versions before 23.4R2-S5-EVO,
-
24.2-EVO versions before 24.2R2-S1-EVO
-
24.4-EVO versions before 24.4R2-EVO.
- Record
CVE-2025-52989- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/R:U/RE:M - CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-140
- Updated
- 2026-11-02
EUVDEUVD-2025-21143
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.
A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.
This issue affects:
Junos OS:
- all versions before 22.2R3-S7,
- 22.4 versions before 22.4R3-S7,
- 23.2 versions before 23.2R2-S4,
- 23.4 versions before 23.4R2-S4,
- 24.2 versions before 24.2R2-S1,
- 24.4 versions before 24.4R1-S2, 24.4R2;
Junos OS Evolved:
-
all versions before 22.4R3-S7-EVO,
-
23.2-EVO versions before 23.2R2-S4-EVO,
-
23.4-EVO versions before 23.4R2-S5-EVO,
-
24.2-EVO versions before 24.2R2-S1-EVO
-
24.4-EVO versions before 24.4R2-EVO.
- Record
EUVD-2025-21143- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/R:U/RE:M - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-23x4-8x8q-6443
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and...
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.
A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.
This issue affects:
Junos OS:
- all versions before 22.2R3-S7,
- 22.4 versions before 22.4R3-S7,
- 23.2 versions before 23.2R2-S4,
- 23.4 versions before 23.4R2-S4,
- 24.2 versions before 24.2R2-S1,
- 24.4 versions before 24.4R1-S2, 24.4R2;
Junos OS Evolved:
-
all versions before 22.4R3-S7-EVO,
-
23.2-EVO versions before 23.2R2-S4-EVO,
-
23.4-EVO versions before 23.4R2-S5-EVO,
-
24.2-EVO versions before 24.2R2-S1-EVO
-
24.4-EVO versions before 24.4R2-EVO.
- Record
GHSA-23x4-8x8q-6443- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:M/U:X - CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-140
- Updated
- 2026-11-02
NVD
An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration.
A user with limited configuration and commit permissions, using a specifically crafted annotate configuration command, can change any part of the device configuration.
This issue affects:
Junos OS:
- all versions before 22.2R3-S7,
- 22.4 versions before 22.4R3-S7,
- 23.2 versions before 23.2R2-S4,
- 23.4 versions before 23.4R2-S4,
- 24.2 versions before 24.2R2-S1,
- 24.4 versions before 24.4R1-S2, 24.4R2;
Junos OS Evolved:
-
all versions before 22.4R3-S7-EVO,
-
23.2-EVO versions before 23.2R2-S4-EVO,
-
23.4-EVO versions before 23.4R2-S5-EVO,
-
24.2-EVO versions before 24.2R2-S1-EVO
-
24.4-EVO versions before 24.4R2-EVO.
- Record
CVE-2025-52989- CVSS 4.0
- 6.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:M/U:X - CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-140
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-52989 is a medium vulnerability (CVSS 6.8) in Juniper Junos, published July 11, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.