CVE-2025-13914

CVE-2025-13914 is a Key Exchange without Entity Authentication vulnerability in Juniper Networks Apstra's SSH implementation that affects all versions prior to 6.1.1. Due to insufficient SSH host key validation, an unauthenticated attacker can conduct a man-in-the-middle attack on SSH connections between Apstra and managed devices, enabling device impersonation and credential theft. The vulnerability carries a HIGH severity rating with a CVSS score of 8.7. It requires network access and moderate attack complexity but does not require prior authentication or user interaction. The attack has broad scope with high impact on both confidentiality and integrity, though availability is unaffected. There is currently no evidence of active exploitation. The vulnerability is not listed on the Known Exploited Vulnerabilities (KEV) catalog, remains inactive on the Hot List, and the EPSS score of 0.00038 indicates minimal probability of exploitation in the wild relative to other CVEs. Organizations should prioritize upgrading to version 6.1.1 or later, though the low exploitation likelihood does not eliminate the need for timely patching given the high severity rating.