Product:
Junos OS
Summary
An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process. This results in complete control over the resource, enabling any low-privileged user logged into the system to connect to the Unix socket and issue commands to manage the DHCP service. Essentially, this gives administrative control over the local DHCP server or DHCP relay.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.8 | CVE-2025-59961 |
Exploitation
To exploit this vulnerability, an attacker with low privileges must gain access to the system and connect to the Unix socket used by the jdhcpd process. Once connected, the attacker can issue commands to manipulate the DHCP service, effectively taking control of the DHCP server or relay without requiring elevated privileges.
Affected Products
- Junos OS: All versions before 21.2R3-S10, all versions of 22.2, from 21.4 before 21.4R3-S12, from 22.4 before 22.4R3-S8, from 23.2 before 23.2R2-S5, from 23.4 before 23.4R2-S6, from 24.2 before 24.2R2-S2, from 24.4 before 24.4R2, from 25.2 before 25.2R1-S1, 25.2R2.
- Junos OS Evolved: All versions before 22.4R3-S8-EVO, from 23.2 before 23.2R2-S5-EVO, from 23.4 before 23.4R2-S6-EVO, from 24.2 before 24.2R2-S2-EVO, from 24.4 before 24.4R2-EVO, from 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to the latest versions of Junos OS and Junos OS Evolved that are not affected by this issue. Regularly applying security patches and updates can help protect against such vulnerabilities.