CVE-2025-59969

OVERVIEW CVE-2025-59969 is a classic buffer overflow vulnerability in Juniper Networks' advanced forwarding toolkit (evo-aftmand/evo-pfemand) affecting Junos OS Evolved on PTX Series and QFX5000 Series devices. An unauthenticated attacker can trigger a Denial of Service condition by sending specially crafted multicast packets to adjacent network segments. Continued packet transmission sustains the DoS impact, forcing line cards and non-line card devices to crash and restart repeatedly. SEVERITY The vulnerability carries a CVSS 3.1 score of 6.5 (Medium severity) with an adjacent network attack vector requiring no authentication or user interaction. While the attack complexity is low and can be executed with minimal effort, the impact is limited to availability; no confidentiality or integrity breaches are possible. The EPSS score of 0.00019 indicates this vulnerability is rarely exploited in the wild relative to other known CVEs, though multiple Junos OS Evolved versions across both device series remain affected and require patching. EXPLOITATION STATUS There is currently no evidence of active exploitation, with no public exploit code available and the vulnerability not appearing on the CISA Known Exploited Vulnerabilities catalog. Community attention remains minimal given the low EPSS score and FAUCET Risk Score of 35.0 out of 100. Organizations running affected Junos OS Evolved versions should implement available patches during standard maintenance windows, though this does not represent an immediate critical threat.