High severity · published Oct 9, 2025
CVE-2025-59975
Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS
7.5
CVSS
0.4%
EPSS
No
On KEV
Description
An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device with inbound API calls to consume all resources on the system, leading to a Denial of Service (DoS).
After continuously flooding the system with inbound connection requests, all available file handles become consumed, blocking access to the system via SSH and the web user interface (WebUI), resulting in a management interface DoS. A manual reboot of the system is required to restore functionality.
This issue affects Junos Space:
* all versions before 22.2R1 Patch V3,
* from 23.1 before 23.1R1 Patch V3.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Junos Space · Juniper Networks
before 22.2R1 Patch V3; 23.1 before 23.1R1 Patch V3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-59975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-59975
Vendor Advisory
https://supportportal.juniper.net/JSA103172
More from Junos Space
9.0
CVE-2025-59978
Junos Space: Stored cross-site scripting vulnerability in web application
8.8
CVE-2019-0017
Junos Space: Unrestricted file upload vulnerability
7.3
CVE-2024-39563
Junos Space: Remote Command Execution (RCE) vulnerability in web application
6.5
CVE-2025-59976
Junos Space: Arbitrary file download vulnerability in web interface
6.5
CVE-2019-0016
Junos Space: Authenticated user able to delete devices without delete device privileges
