Juniper JUNOS: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 5

• Critical 9.8
  CVE-2023-36845 Exploited Public exploit Scanner template EPSS 95%

  Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

  A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker …

  Juniper Networks Junos OS Network devices
  Aug 17, 2023

  KEV Nov 13, 2023
• Medium 5.3
  CVE-2023-36844 Exploited Public exploit Scanner template EPSS 90%

  Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

  A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify …

  Juniper Networks Junos OS Network devices
  Aug 17, 2023

  KEV Nov 13, 2023
• Medium 5.3
  CVE-2023-36846 Exploited Public exploit EPSS 93%

  Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

  A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't re…

  Juniper Networks Junos OS Network devices
  Aug 17, 2023

  KEV Nov 13, 2023
• Medium 5.3
  CVE-2023-36847 Exploited EPSS 83%

  Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

  A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php tha…

  Juniper Networks Junos OS Network devices
  Aug 17, 2023

  KEV Nov 13, 2023
• Medium 5.3
  CVE-2023-36851 Exploited

  Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

  A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php th…

  Juniper Networks Junos OS Network devices
  Sep 26, 2023

  KEV Nov 13, 2023

Revision history

1. 2023-09-28 #4

   CVE ergänzt

2. 2023-08-31 #3

   Präzisierung: Nur EX- und SRX-Serie betroffen

3. 2023-08-28 #2

   PoC aufgenommen

4. 2023-08-17 #1

   Initiale Fassung

References

• PoC auf labs.watchtowr.com vom 2023-08-28
  https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/
• Juniper Security Bulletin vom 2023-08-17
  https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution