What is CVE-2025-52981?

CVE-2025-52981 is a high-severity vulnerability in Juniper Junos, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2025-07-11.

How severe is CVE-2025-52981?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Juniper Junos

CVE-2025-52981

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX1600, SRX2300, SRX 4000 Series, and SRX5000 Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If a sequence of specific PIM packets is received, this will cause a flowd crash and restart. This issue affects Junos OS: * all versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S11, * 22.2 versions before 22.2R3-S7, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S4, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R2. This is a similar, but different vulnerability than the issue reported as CVE-2024-47503, published in JSA88133.

EPSS: 0.004 (37.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Junos — versions 21.2, 21.4, 22.2
Juniper Srx1600
Juniper Srx2300
Juniper Srx4100
Juniper Srx4120
Juniper Srx4200
Juniper Srx4300
Juniper Srx4600
Juniper Srx4700
Juniper Srx5400

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

sirt@juniper.net (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-52981?: CVE-2025-52981 is a high-severity vulnerability in Juniper Junos, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2025-07-11.
How severe is CVE-2025-52981?: High severity. CVSS v3 base score is 7.5 out of 10.