A stack-based buffer overflow in the phone-home daemon (phcd) allows an adjacent unauthenticated attacker to send a crafted DHCP SZTP bootstrap message that overflows a buffer and results in arbitrary code execution with root privileges. This vulnerability enables the attacker to fully compromise the affected Juniper device, potentially compromising network integrity, confidentiality, and availability.

The flaw affects Juniper Networks Junos OS and Junos OS Evolved devices that support Secure‑ZTP. All versions of the operating systems listed as affected by the advisory carry the vulnerability unless a recent patched release is installed.

The CVSS score is 8.7, indicating high severity, and the EPSS score is <1%, pointing to a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. No workaround; the only mitigation is installing a patched release. The likely attack vector is a crafted DHCP SZTP bootstrap message from a nearby network segment, so any device that receives such a message while Secure‑ZTP is enabled is at risk.