To fix a serious security vulnerability that may be used to take over vulnerable devices, Juniper Networks has issued security upgrades for its Session Smart Router, Session Smart Conductor, and WAN Assurance Router products.
The vulnerability, identified as CVE-2025-21589, has a CVSS v3.1 score of 9.8 and a CVS v4 score of 9.3.
A Way Around Authentication According to a company alert, a network-based attacker may be able to get past authentication and take over the Juniper Networks Session Smart Router by exploiting an Alternate Path or Channel vulnerability.
Juniper Networks stated that it is not aware of any malicious exploitation read more about Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.