Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to impersonate managed devices. Due to insufficient SSH host key validation an attacker can perform a machine-in-the-middle attack on the SSH connections from Apstra to managed devices, enabling an attacker to impersonate a managed device and capture user credentials. This issue affects all versions of Apstra before 6.1.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-09 | 2 | Disclosure1Patch1 |
| 2026-04-10 | 1 | Disclosure1 |
CVE-2025-13914 A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to impersona… https://www.cve.org/CVERecord?id=CVE-2025-13914
Post summary
The post briefly discloses a new SSH key exchange vulnerability in Juniper Apstra that permits unauthenticated MITM impersonation, with no PoC, exploit, or patch details shared.
Apstra: SSH host key validation vulnerability for managed devices CVE: CVE-2025-13914 PT ID: PT-2026-31796 Vendor: Juniper networks Product: Apstra CVSS: 8.7 Credits: Juniper SIRT would like to acknowledge and thank the Federal Office for Information Security (BSI) for responsibly reporting this vulnerability. Description: A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to impersonate managed devices. Due to insufficient SSH host key validation an attacker can perform a machine-in-the-middle attack on the SSH connections from Apstra to managed devices, enabling an attacker to impersonate a managed device and capture user credentials. This issue affects all versions of Apstra before 6.1.1. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2025-13914 • https://kb.juniper.net/JSA107862 #dbugs_vuln
Post summary
Juniper Networks disclosed a CVE‑2025‑13914 SSH host key validation issue in Apstra that allows unauthenticated MITM attacks. Affected versions are prior to 6.1.1 and a vendor advisory with patch guidance is available.
[CVE-2025-13914: HIGH] Critical security flaw in Juniper Networks Apstra: a Key Exchange without Entity Authentication vulnerability allows MITM attacks. Update to version 6.1.1 to fix.#cve,CVE-2025-13914,#cybersecurity https://cvefind.com/CVE-2025-13914
Post summary
The message informs about a high‑severity Juniper Networks Apstra vulnerability enabling MITM attacks and directs users to upgrade to version 6.1.1 for a fix.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | juniper | apstra | - | - | - |