CVE & CISA-KEV Catalog

CVE-2025-21596

MEDIUM
5.5
CVSS v3
NVD

Description

An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on SRX1500, SRX4100, and SRX4200 devices allows a local, low-privileged authenticated attacker executing the 'show chassis environment pem' command to cause the chassis daemon (chassisd) to crash and restart, resulting in a temporary Denial of Service (DoS). However, repeated execution of this command will eventually cause the chassisd process to fail to restart, impacting packet processing on the system. This issue affects Junos OS on SRX1500, SRX4100, SRX4200: * All versions before 21.4R3-S9, * from 22.2 before 22.2R3-S5, * from 22.3 before 22.3R3-S4, * from 22.4 before 22.4R3-S4, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S1.

How to fix

Remediation Available
junosNVD
Affected:< 21.4Fixed in:21.4CVE-2025-21596derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

0.15%probability of exploitation in 30 days
5thpercentile

Low risk: more likely to be exploited than 5% of all known CVEs.

References

Related Vulnerabilities

Other CWE-755 vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2017-5638Critical9.8100%KEV + RansomFix
CVE-2020-7247Critical9.899%KEVFix
CVE-2023-36933High7.572%-Fix
CVE-2018-0934High7.566%-Fix
CVE-2019-14287High8.864%-Fix
CVE-2019-12815Critical9.858%-Fix
Embed a live status badge for CVE-2025-21596
CVE-2025-21596 severity badge

Markdown

[![CVE-2025-21596](https://tridentstack.com/cve/badge/CVE-2025-21596.svg)](https://tridentstack.com/cve/CVE-2025-21596)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-21596"><img src="https://tridentstack.com/cve/badge/CVE-2025-21596.svg" alt="CVE-2025-21596"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-01-26.