Description
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series
and SRX Series
allows an unauthenticated, network-based attacker to remotely execute code.
Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code.
This issue affects Juniper Networks Junos OS on EX Series
and
SRX Series:
* All versions prior to
20.4R3-S9;
* 21.1 versions 21.1R1 and later;
* 21.2 versions prior to 21.2R3-S7;
* 21.3 versions prior to 21.3R3-S5;
* 21.4 versions prior to 21.4R3-S5;
* 22.1 versions
prior to
22.1R3-S4;
* 22.2 versions
prior to
22.2R3-S2;
* 22.3 versions
prior to
22.3R2-S2, 22.3R3-S1;
* 22.4 versions
prior to
22.4R2-S1, 22.4R3;
* 23.2 versions prior to 23.2R1-S1, 23.2R2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Junos OS | < 20.4R3-S9, 21.1 – < 21.1*, 21.2 – < 21.2R3-S7, 21.3 – < 21.3R3-S5, 21.4 – < 21.4R3-S5, 22.1 – < 22.1R3-S4, 22.2 – < 22.2R3-S2, 22.3 – < 22.3R2-S2, 22.3R3-S1, 22.4 – < 22.4R2-S1, 22.4R3, 23,2 – < 23.2R1-S1, 23.2R2 | 20.4R3-S9 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Junos OS PHPRC Environment Variable Manipulation RCE
exploit/freebsd/http/junos_phprc_auto_prepend_file
GitHub 19 repositories · most starred shown
-
vulncheck-oss/cve-2023-36845-scanner ★ 63 · Sep 16, 2023
A go-exploit to scan for Juniper firewalls vulnerable to CVE-2023-36845
-
kljunowsky/CVE-2023-36845 ★ 55 · Sep 26, 2023
Juniper Firewalls CVE-2023-36845 - RCE
-
Asbawy/Automation-for-Juniper-cve-2023-36845 ★ 19 · Jan 29, 2024
Simple Automation script for juniper cve-2023-36845
-
ak1t4/CVE-2023-36845 ★ 5 · Feb 13, 2024
CVES
-
cyberh3als/CVE-2023-36845-POC ★ 4 · Oct 2, 2023
CVE-2023-36845 PoC script automates the PoC for CVE-2023-36845 targeting Juniper Networks Junos OS's J-Web component on EX and SRX Series devices. It exploits a PHP flaw, allowing remote modification…
-
zaenhaxor/CVE-2023-36845 ★ 4 · Sep 29, 2023
CVE-2023-36845 - Juniper Firewall Remote code execution (RCE)
-
0xNehru/CVE-2023-36845-Juniper-Vulnerability ★ 1 · Feb 14, 2024
This Python script automates the Proof of Concept (PoC) for CVE-2023-36845, a vulnerability impacting Juniper Networks Junos OS on EX and SRX Series devices. The vulnerability resides in the J-Web co…
-
jahithoque/Juniper-CVE-2023-36845-Mass-Hunting ★ 1 · Jan 30, 2024
Juniper RCE (Remote Code Execution) CVE-2023-36845 is a vulnerability that has been identified within Juniper's software. This particular flaw allows for remote code execution, meaning an attacker co…
-
simrotion13/CVE-2023-36845 ★ 1 · Oct 1, 2023
-
halencarjunior/CVE-2023-36845 ★ 1 · Sep 27, 2023
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Juniper J-Web - Remote Code Execution http/cves/2023/CVE-2023-36845.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2023-2092 Juniper JUNOS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 28, 2023