CVE-2025-6549
Last modified
CVE-2025-6549 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the Juniper Web Device Manager (J-Web). When Juniper Secure connect (JSC) is enabled on specific interfaces, or multiple interfaces are configured for J-Web, the J-Web UI is reachable over more than the intended interfaces. This issue affects Junos OS: * all versions before 21.4R3-S9, * 22.2 versions before 22.2R3-S5, * 22.4 versions before 22.4R3-S5, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S5, * 24.2 versions before 24.2R2.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the Juniper Web Device Manager (J-Web). When Juniper Secure connect (JSC) is enabled on specific interfaces, or multiple interfaces are configured for J-Web, the J-Web UI is reachable over more than the intended interfaces. This issue affects Junos OS: * all versions before 21.4R3-S9, * 22.2 versions before 22.2R3-S5, * 22.4 versions before 22.4R3-S5, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S5, * 24.2 versions before 24.2R2.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Juniper | Junos | < 21.4 |
| Juniper | Junos | 21.4 |
| Juniper | Junos | 22.2 |
| Juniper | Junos | 22.4 |
| Juniper | Junos | 23.2 |
| Juniper | Junos | 23.4 |
| Juniper | Junos | 24.2 |
References
- https://supportportal.juniper.net/JSA100098Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-6549?
How severe is CVE-2025-6549?
How do I fix CVE-2025-6549?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-65471An arbitrary file upload vulnerability in the /admin/manager…8.8
- CVE-2025-65472A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.…8.8
- CVE-2025-65473An arbitrary file rename vulnerability in the /admin/filer.p…9.1
- CVE-2025-65474An arbitrary file rename vulnerability in the /admin/manager…9.8
- CVE-2025-65480An issue was discovered in Pacom Unison Client 5.13.1. Authe…8.8
- CVE-2025-65482An XML External Entity (XXE) vulnerability in opensagres XDo…9.8
- CVE-2025-65493NULL pointer dereference in src/coap_openssl.c in OISM libco…7.5
- CVE-2025-65494NULL pointer dereference in get_san_or_cn_from_cert() in src…7.5
- CVE-2025-65495Integer signedness error in tls_verify_call_back() in src/co…7.5
- CVE-2025-65496NULL pointer dereference in coap_dtls_generate_cookie() in s…4.3
- CVE-2025-65497NULL pointer dereference in coap_dtls_generate_cookie() in s…4.3
- CVE-2025-65498NULL pointer dereference in coap_dtls_generate_cookie() in s…4.3
Are you affected by CVE-2025-6549?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST