Is CVE-2025-52983 actively exploited?

No active exploitation of CVE-2025-52983 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-52983 be exploited remotely?

Yes. CVE-2025-52983 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-52983?

CVE-2025-52983 has a CVSS score of 7.2 (HIGH).

HOME VULNERABILITIESCVE-2025-52983

HIGH

CVE-2025-52983

CWE-446Published: July 11, 2025· Updated: Jun 17, 2026

7.2

CVSS v3.1

Official Description

A UI Discrepancy for Security Feature

vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device.

On VM Host Routing Engines (RE), even if the configured public key for root has been removed, remote users which are in possession of the corresponding private key can still log in as root.

This issue affects Junos OS:

* all versions before 22.2R3-S7,

* 22.4 versions before 22.4R3-S5,

* 23.2 versions before 23.2R2-S3,

* 23.4 versions before 23.4R2-S3,

* 24.2 versions before 24.2R1-S2, 24.2R2.

NVD Source

Technical Analysis

CVE-2025-52983 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.2.