What is CVE-2025-30648?

CVE-2025-30648 is a high-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 7.4/10. Published 2025-04-09.

How severe is CVE-2025-30648?

High severity. CVSS v3 base score is 7.4 out of 10.

Improper input validation in Juniper Junos

CVE-2025-30648

An Improper Input Validation vulnerability in the Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause the jdhcpd process to crash resulting in a Denial of Ser…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (10.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Juniper Junos — versions 21.2, 21.4, 22.2
Juniper Junos_os_evolved — versions 22.4, 23.2, 23.4
Juniper Networks Junos Os — versions 0, 21.4, 22.2
Juniper Networks Junos Os Evolved — versions 22.4, 23.2, 23.4

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

sirt@juniper.net (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-30648?: CVE-2025-30648 is a high-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 7.4/10. Published 2025-04-09.
How severe is CVE-2025-30648?: High severity. CVSS v3 base score is 7.4 out of 10.