Session Smart Router 6.3
SSR-6.3Juniper · OS release · Session Smart Router Series
Unsupported since · 3 days ago
Session Smart Router 6.3 reached end of support on (3 days ago).
- Notice published
- 2y 1mo ago
- End of software maintenance
- 6mo ago
- End of security support
- 6mo ago
- End of support
- 3 days ago
Lifecycle Milestones
| Lifecycle notice published | 2y 1mo ago | |
|---|---|---|
| End of software maintenance | 6mo ago | |
| End of security vulnerability support | 6mo ago | |
| Last date of support | 3 days ago |
Known Exploited Vulnerabilities
1 CVE in CISA's Known Exploited Vulnerabilities catalog is recorded against the Juniper platform this release belongs to and may apply to this release; verify against the vendor advisory before acting. Juniper security vulnerability support for this release stopped on . Where one applies, upgrade, isolate, or compensate.
| CVE | KEV added | Vulnerability | Flags |
|---|---|---|---|
CVE-2025-21590
|
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
KEV added 2025-03-13
|
Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.
Correlation is at the platform level, not per-OS-version (entries disclosed well before this release train shipped are left out). Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.
Is Session Smart Router 6.3 still maintained?
No. Juniper no longer maintains Session Smart Router 6.3; support ended on 2026-11-06. It receives no fixes of any kind, including security patches. Plan an upgrade to a maintained release. See Juniper's lifecycle bulletin.
When do security fixes for Session Smart Router 6.3 stop?
Juniper stopped engineering fixes for Session Smart Router 6.3, including security patches, on 2026-05-06. A device on this release cannot be patched against vulnerabilities disclosed after that date without upgrading.
What should I upgrade Session Smart Router 6.3 to?
Upgrade to a currently maintained Juniper release. Check Juniper's release notes for the recommended version.
Which known-exploited CVEs may apply to the Session Smart Router 6.3?
1 CVE in CISA's Known Exploited Vulnerabilities catalog is recorded against Juniper Session Smart Router and may apply to Session Smart Router 6.3, whose security fixes stopped on 2026-05-06. Verify each against the vendor advisory for the fixed releases before acting. See the Known Exploited Vulnerabilities table for the full list.
Session Smart Router 6.3 Release Lifecycle
Session Smart Router 6.3 is a Juniper Session Smart Router software release. Releases are maintained on a fixed schedule: Juniper ships fixes and security patches until the release reaches end of engineering, after which a device must be upgraded to a maintained release to stay patchable. The dates below are milestones for the software train, not for any specific appliance — hardware running this release has its own separate lifecycle. This product has reached end of life as of , meaning Juniper no longer provides technical support, software updates, or hardware replacement for this product. Organizations still running the Session Smart Router 6.3 should plan a migration .