CVE-2025-21589
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device.
This issue affects Session Smart Router:
-
from 5.6.7 before 5.6.17,
-
from 6.0 before 6.0.8 (affected from 6.0.8),
-
from 6.1 before 6.1.12-lts,
-
from 6.2 before 6.2.8-lts,
-
from 6.3 before 6.3.3-r2;
This issue affects Session Smart Conductor:
-
from 5.6.7 before 5.6.17,
-
from 6.0 before 6.0.8 (affected from 6.0.8),
-
from 6.1 before 6.1.12-lts,
-
from 6.2 before 6.2.8-lts,
-
from 6.3 before 6.3.3-r2;
This issue affects WAN Assurance Managed Routers:
-
from 5.6.7 before 5.6.17,
-
from 6.0 before 6.0.8 (affected from 6.0.8),
-
from 6.1 before 6.1.12-lts,
-
from 6.2 before 6.2.8-lts,
-
from 6.3 before 6.3.3-r2.
No affected software listed.
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime