Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.5

Juniper Security Director Policy Enforcer allows unauthenticated image replacement

CVE-2025-11198 · published 1 year ago
Summary

An attacker can upload a fake image to replace legitimate vSRX images, potentially leading to security risks. This affects all pre-23.1R1 Hotpatch v3 versions of Juniper Security Director Policy Enforcer. Update to the latest version to fix this issue.

What to do
  • Update juniper security_director_policy_enforcer to version 23.1 or later.
Affected software
VendorProductAffected versions
juniper security_director_policy_enforcer < 23.1
23.1
cpe:2.3:a:juniper:security_director_policy_enforcer:*:*:*:*:*:*:*:*
Original advisory text
A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legitimate vSRX image...
A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legitimate vSRX images with malicious ones.



If a trusted user initiates deployment, Security Director Policy Enforcer will deliver the attacker's uploaded image to VMware NSX instead of a legitimate one.





This issue affects Security Director Policy Enforcer:  



* All versions before 23.1R1 Hotpatch v3.


This issue does not affect Junos Space Security Director Insights.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
8.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published9 Oct 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-11198 · NVD
Track software like this
Free during beta