CVE-2025-52980 is a Use of Incorrect Byte Ordering vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on SRX300 Series devices. An unauthenticated, network-based attacker can exploit this flaw by sending a specially crafted BGP update over an established session, causing the rpd to crash and restart, leading to a Denial-of-Service (DoS). This vulnerability affects various versions of Junos OS across the 22.1, 22.3, 22.4, 23.2, and 23.4 release trains. Rated with a CVSS score of 7.5 (HIGH), the vulnerability has a low attack complexity and requires no user interaction or privileges, making it easily exploitable. The primary impact is a Denial-of-Service, as the affected device's routing capabilities are disrupted. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or attention at this time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
22.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:* | ||
22.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:* | ||
22.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:* | ||
22.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:* | ||
22.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.