CVE-2025-13914 describes a vulnerability in Juniper Networks Apstra's SSH implementation affecting all versions prior to 6.1.1. The issue arises from insufficient SSH host key validation during key exchange, enabling an unauthenticated attacker to conduct a man-in-the-middle attack. This allows the attacker to impersonate managed devices and capture sensitive credentials transmitted over SSH sessions. The vulnerability is categorized under CWE-322 (Key Exchange without Entity Authentication) and has a CVSS 3.1 base score of 8.7, indicating high severity. No official remediation level or patch information is provided in the available data.

An attacker can impersonate managed devices by exploiting the lack of entity authentication in the SSH key exchange process. This enables man-in-the-middle attacks on SSH connections from Apstra to managed devices, potentially leading to credential theft and unauthorized access. The confidentiality and integrity of communications are compromised, but availability impact is not indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch links are provided, users should monitor Juniper Networks advisories for updates. Until a fix is available, consider restricting network access to trusted devices and monitoring for suspicious SSH activity related to Apstra-managed devices.