CVE Feed

    Dashboard / CVE / CVE-2025-60007

    CVE-2025-60007

    A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with low privileges to cause a Denial-of-Service (DoS). When a user executes the 'show chassis' command with specifically crafted options, chassisd will crash and restart. Due to this all components but the Routing Engine (RE) in the chassis are reinitialized, which leads to a complete service outage, which the system automatically recovers from. This issue affects: Junos OS on MX, SRX and EX Series, except MX10000 Series and MX304:  * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S5, * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S2, * 24.4 versions before 24.4R2.

    Published:Jan 15, 2026
    Last Modified:Mar 16, 2026
    EPS:Jan 15, 2026
    EPSS Score:0.00005
    CVSS Score:5.5

    Affected Products

    Vendor
    Juniper
    Product
    Ex2300
    Vendor
    Juniper
    Product
    Ex2300-c
    Vendor
    Juniper
    Product
    Ex3400
    Vendor
    Juniper
    Product
    Ex4000
    Vendor
    Juniper
    Product
    Ex4100
    Vendor
    Juniper
    Product
    Ex4100-f
    Vendor
    Juniper
    Product
    Ex4100-h
    Vendor
    Juniper
    Product
    Ex4300
    Vendor
    Juniper
    Product
    Ex4400
    Vendor
    Juniper
    Product
    Ex4600
    Vendor
    Juniper
    Product
    Ex4650
    Vendor
    Juniper
    Product
    Ex9204
    Vendor
    Juniper
    Product
    Ex9208
    Vendor
    Juniper
    Product
    Ex9214
    Vendor
    Juniper
    Product
    Junos
    Vendor
    Juniper
    Product
    Mx10004
    Vendor
    Juniper
    Product
    Mx10008
    Vendor
    Juniper
    Product
    Mx2008
    Vendor
    Juniper
    Product
    Mx2010
    Vendor
    Juniper
    Product
    Mx2020
    Vendor
    Juniper
    Product
    Mx204
    Vendor
    Juniper
    Product
    Mx240
    Vendor
    Juniper
    Product
    Mx304
    Vendor
    Juniper
    Product
    Mx480
    Vendor
    Juniper
    Product
    Mx960
    Vendor
    Juniper
    Product
    Srx1500
    Vendor
    Juniper
    Product
    Srx1600
    Vendor
    Juniper
    Product
    Srx2300
    Vendor
    Juniper
    Product
    Srx300
    Vendor
    Juniper
    Product
    Srx320
    Vendor
    Juniper
    Product
    Srx340
    Vendor
    Juniper
    Product
    Srx345
    Vendor
    Juniper
    Product
    Srx380
    Vendor
    Juniper
    Product
    Srx4100
    Vendor
    Juniper
    Product
    Srx4120
    Vendor
    Juniper
    Product
    Srx4200
    Vendor
    Juniper
    Product
    Srx4300
    Vendor
    Juniper
    Product
    Srx4600
    Vendor
    Juniper
    Product
    Srx4700
    Vendor
    Juniper
    Product
    Srx5400
    Vendor
    Juniper
    Product
    Srx5600
    Vendor
    Juniper
    Product
    Srx5800
    Vendor
    Juniper Networks
    Product
    Junos Os

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-33773 (CVSS 6.9) — An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe) of Juniper Network…
    CVE-2025-30644 (CVSS 7.7) — A Heap-based Buffer Overflow vulnerability in the flexible PIC concentrator (FPC) of Juniper Networks Junos OS…
    CVE-2024-47497 (CVSS 8.7) — An Uncontrolled Resource Consumption vulnerability in the http daemon (httpd) of Juniper Networks Junos OS on …
    CVE-2024-39565 (CVSS 7.7) — An Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in J-Web shipped…
    CVE-2024-21620 (CVSS 8.8) — An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web…
    CVE-2024-21619 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Conta…
    CVE-2023-44203 (CVSS 6.5) — An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) o…
    CVE-2023-44191 (CVSS 7.5) — An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an …
    CVE-2023-36851 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows…
    CVE-2023-36844 (CVSS 5.3) — A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High