1. Home
  2. CVE Database
  3. CVE-2025-52952
MEDIUM · 6.5

CVE-2025-52952

An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards allows an unauthenticate...

Vulnerability Description

An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards allows an unauthenticated adjacent attacker to send a malformed packet to the device, leading to an FPC crash and restart, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks: Junos OS: * All versions before 22.2R3-S1, * from 22.4 before 22.4R2. This feature is not enabled by default.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
JuniperJunos< 22.2
Juniper2X100Ge \+ 4X10Ge Mpc5E-
Juniper2X100Ge \+ 4X10Ge Mpc5Eq-
Juniper2X100Ge \+ 8X10Ge Mpc4E-
Juniper32X10Ge Mpc4E-
Juniper6X40Ge \+ 24X10Ge Mpc5E-
Juniper6X40Ge \+ 24X10Ge Mpc5Eq-
JuniperMpc1-
JuniperMpc1 Q-
JuniperMpc1E-
JuniperMpc1E Q-
JuniperMpc2-
JuniperMpc2 Eq-
JuniperMpc2 Q-
JuniperMpc2E-
JuniperMpc2E Eq-
JuniperMpc2E Ng-
JuniperMpc2E Ng Q-
JuniperMpc2E P-
JuniperMpc2E Q-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2025-52952?

CVE-2025-52952 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards allows an unauthenticate...

How severe is CVE-2025-52952?

CVE-2025-52952 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-52952?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Junos, Juniper 2X100Ge \+ 4X10Ge Mpc5E, Juniper 2X100Ge \+ 4X10Ge Mpc5Eq, Juniper 2X100Ge \+ 8X10Ge Mpc4E, Juniper 32X10Ge Mpc4E.