CVE-2025-59975
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Uncontrolled resource consumption in the HTTP daemon of Juniper Networks Junos Space allows an unauthenticated attacker to flood the system with API calls, leading to denial of service (DoS). After continuous flooding, all file handles are consumed, blocking SSH and web UI access. A manual reboot is required.
Risk Assessment
Risk of complete unavailability of the management system, potentially preventing administration and monitoring of infrastructure.
Recommendation
Upgrade Junos Space to version 22.2R1 Patch V3 or 23.1R1 Patch V3, which include the fix.
Other vulnerabilities in Juniper Junos Space
See all- CVE-2014-3412High
Unspecified vulnerability in Juniper Junos Space before version 13.3R1.8 that allows remote attackers to execute arbitrary commands when the firewall is disabled.
- CVE-2025-59999Medium
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the API Access Profiles page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
- CVE-2025-59989Medium
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Original NVD description (English source)
An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device with inbound API calls to consume all resources on the system, leading to a Denial of Service (DoS). After continuously flooding the system with inbound connection requests, all available file handles become consumed, blocking access to the system via SSH and the web user interface (WebUI), resulting in a management interface DoS. A manual reboot of the system is required to restore functionality. This issue affects Junos Space: * all versions before 22.2R1 Patch V3, * from 23.1 before 23.1R1 Patch V3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS