The vulnerability is a Use of a Broken or Risky Cryptographic Algorithm in the TLS/SSL server of Juniper Networks Junos Space, permitting the server to support static key ciphers. Static key ciphers lack Perfect Forward Secrecy and weaken the confidentiality of traffic transmitted over the connection, exposing on‑path traffic to potential compromise.

All versions of Junos Space prior to 24.1R5 are affected, including releases 24.1R1 through 24.1R4 and any earlier releases. The impact spans the Juniper Networks Junos Space platform wherever those versions are deployed.

The CVSS score of 8.2 indicates high severity, while an EPSS score of less than 1% suggests low probability of known exploitation so far. It is not listed in the CISA KEV catalog. Based on the presence of a TLS/SSL server, the likely attack vector is remote network connectivity to the TLS/SSL interface; this inference is not explicitly stated in the CVE description. The flaw can be exploited to reduce data confidentiality by enabling static key ciphers.