Product:
Junos OS
Summary
An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to files on the device. When the FTP server is enabled and a user named ftp or anonymous is configured, that user can login without providing the configured password and then has read-write access to their home directory. This issue affects multiple versions of Junos OS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.9 | CVE-2025-59980 |
Exploitation
To exploit this vulnerability, an attacker must enable the FTP server on the device and configure a user named ftp or anonymous. Once configured, the attacker can log in without a password, gaining unauthorized read-write access to the home directory. This access can lead to further exploitation of the device and its files.
Affected Products
- All versions of Junos OS before 22.4R3-S8
- 23.2 versions before 23.2R2-S3
- 23.4 versions before 23.4R2
Mitigation
To mitigate this vulnerability, it is recommended to disable the FTP server if it is not needed. If FTP is required, ensure that strong authentication methods are in place and consider restricting access to trusted networks only. Regularly update the Junos OS to the latest version to protect against known vulnerabilities.