Description
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables.
Using a crafted request an attacker is able to modify
certain PHP environment variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on EX Series:
* All versions prior to 20.4R3-S9;
* 21.1 versions 21.1R1 and later;
* 21.2 versions prior to 21.2R3-S7;
* 21.3 versions
prior to
21.3R3-S5;
* 21.4 versions
prior to
21.4R3-S5;
* 22.1 versions
prior to
22.1R3-S4;
* 22.2 versions
prior to
22.2R3-S2;
* 22.3 versions
prior to 22.3R3-S1;
* 22.4 versions
prior to
22.4R2-S2, 22.4R3;
* 23.2 versions prior to
23.2R1-S1, 23.2R2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Junos OS | < 20.4R3-S9, 21.1 – < 21.1*, 21.2 – < 21.2R3-S6, 21.3 – < 21.3R3-S5, 21.4 – < 21.4R3-S5, 22.1 – < 22.1R3-S4, 22.2 – < 22.2R3-S2, 22.3 – < 22.3R3-S1, 22.4 – < 22.4R2-S2, 22.4R3, 23.2 – < 23.2R1-S1, 23.2R2 | 20.4R3-S9 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
watchtowrlabs/juniper-rce_cve-2023-36844 ★ 114 · Aug 25, 2023
-
r3dcl1ff/CVE-2023-36844_Juniper_RCE ★ 5 · Sep 24, 2023
A Proof of Concept for chaining the CVEs [CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847] to achieve Remote Code Execution (phpinfo) in Juniper JunOS within SRX and EX Series products…
-
Ap0dexMe0/CVE-2023-36844 ★ 0 · Sep 20, 2023
Perform With Massive Juniper Remote Code Execution
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Juniper Devices - Remote Code Execution http/cves/2023/CVE-2023-36844.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2023-2092 Juniper JUNOS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 28, 2023