CVE-2025-30650CWE-306

CVE-2025-30650

Medium · published April 8, 2026

CVSS v3.1
6.7
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.

This issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:

* MPC7, MPC8, MPC9, MPC10, MPC11

* LC2101, LC2103

* LC480, LC4800, LC9600

* MX304 (built-in FPC)

* MX-SPC3

* SRX5K-SPC3

* EX9200-40XS

* FPC3-PTX-U2, FPC3-PTX-U3

* FPC3-SFF-PTX

* LC1101, LC1102, LC1104, LC1105

This issue affects Junos OS:

* all versions before 22.4R3-S8,

* from 23.2 before 23.2R2-S6,

* from 23.4 before 23.4R2-S6,

* from 24.2 before 24.2R2-S3,

* from 24.4 before 24.4R2,

* from 25.2 before 25.2R2.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-04-08T23:24Z
Affected products (45)
ProductVersionsFixed in
juniper/junos≤ 22.4—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
References (2)
EPSS history
Timeline
  • 08 APR 17:26Z
    Junos OS: Privileged local user can gain access to a Linux-based FPC as root
    cvelistv5