Skip to content
VulniPulse
Sign in
Medium6.7Juniper Networks

Medium [CVE-2025-30650] Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root

This medium-severity Juniper Networks advisory covers CVE-2025-30650 affecting Junos OS, Junos, PTX.

CVE-2025-30650 Published Apr 8, 2026Updated by vendor Jul 25, 2026
CVE-2025-30650
Affected products & platforms
Juniper NetworksRoutersSwitchesJunosMX / RoutersMX304EX9200
Open vendor advisory

Android app · Google Play

Monitor future Juniper Networks CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root.

This issue affects systems running Junos OS using Linux-based line cards. Affected line cards include:

  • MPC7, MPC8, MPC9, MPC10, MPC11
  • LC2101, LC2103
  • LC480, LC4800, LC9600
  • MX304 (built-in FPC)
  • MX-SPC3
  • EX9200-40XS
  • FPC3-PTX-U2, FPC3-PTX-U3
  • LC1101, LC1102, LC1104, LC1105
  • all versions before 22.4R3-S8,
  • from 23.2 before 23.2R2-S6,
  • from 23.4 before 23.4R2-S6,

Affected products named by the advisory: MX.

Affected products named by the advisory: MX.

Affected versions
  • * all versions before 22

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions
  • 22.4R3-S8
  • 23.2R2-S6
  • 23.4R2-S6
  • 24.2R2-S3
  • 24.4R2
  • 25.2R2

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation

Upgrade to a fixed release: 22.4R3-S8, 23.2R2-S6, 23.4R2-S6, 24.2R2-S3, 24.4R2, 25.2R2. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.