CVE-2025-13914

Last refreshed2026-10-12

Status: UPDATED | Advisory ID: CVE-2025-13914

Key Details

CVE	CVE-2025-13914
CVSS Score / Version	8.7 (High) / CVSS v3.1
Updated	2026-10-07
CVSS Vector	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N`
CVSS Prose	attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products	juniper apstra and Juniper Networks Apstra
Classified as	CWE-322 (Key Exchange without Entity Authentication)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
juniper	apstra
Juniper Networks	Apstra

Vendor

Product

Affected Versions

Patch Status

juniper

apstra

Juniper Networks

Apstra

Subsystems	General OT
Sectors	Multiple

What to Know

A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM

attacker to impersonate managed devices.

Due to insufficient SSH host key validation an attacker can perform a machine-in-the-middle attack on the SSH connections from Apstra to managed devices, enabling an attacker to impersonate a managed device and capture user credentials.

This issue affects all versions of Apstra before 6.1.1. (NVD)