CVE-2025-30644

CVE-2025-30644 is a Heap-based Buffer Overflow vulnerability in the flexible PIC concentrator (FPC) of Juniper Networks Junos OS, impacting various EX and QFX5k Series devices. An attacker can trigger a Denial of Service (DoS) by sending a specially crafted DHCP packet, causing the FPC to crash and restart. While primarily a DoS, under rare timing conditions or with DHCP Option 82 enabled, memory corruption can occur, and due to the nature of the overflow, remote code execution (RCE) within the FPC is also a potential outcome, leading to complete control of the component. This vulnerability has a CVSS score of 7.5 (HIGH) with an attack vector of Adjacent Network (AV:A) and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H), but with high attack complexity (AC:H). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.