CVE-2025-21589 — Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability

Affected: Juniper Networks Session Smart Router, Juniper Networks Session Smart Conductor, Juniper Networks WAN Assurance Managed Router

An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device.

This issue affects Session Smart Router:

* from 5.6.7 before 5.6.17, * from 6.0 before 6.0.8 (affected from 6.0.8),

* from 6.1 before 6.1.12-lts, * from 6.2 before 6.2.8-lts, * from 6.3 before 6.3.3-r2;

This issue affects Session Smart Conductor:

* from 5.6.7 before 5.6.17, * from 6.0 before 6.0.8 (affected from 6.0.8),

* from 6.1 before 6.1.12-lts, * from 6.2 before 6.2.8-lts, * from 6.3 before 6.3.3-r2;

This issue affects WAN Assurance Managed Routers:

* from 5.6.7 before 5.6.17, * from 6.0 before 6.0.8 (affected from 6.0.8),

* from 6.1 before 6.1.12-lts, * from 6.2 before 6.2.8-lts, * from 6.3 before 6.3.3-r2.

Most recent entries from all

CVE-2025-21589 — Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability