The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX devices allows a hacker to execute arbitrary code.

The J-Web interface vulnerability in Junos OS SRX devices allows remote code execution via unlimited loading of dangerous files.

Reporter	Title	Published	Views	Family All 48
0day.today	Juniper SRX Firewall / EX Switch Remote Code Execution Exploit	2 Oct 202300:00	–	zdt
GithubExploit	Exploit for PHP External Variable Modification in Juniper Junos	25 Aug 202307:28	–	githubexploit
GithubExploit	Exploit for PHP External Variable Modification in Juniper Junos	20 Sep 202302:32	–	githubexploit
GithubExploit	Exploit for PHP External Variable Modification in Juniper Junos	13 Feb 202414:59	–	githubexploit
Gitee	Exploit for PHP External Variable Modification in Juniper Junos	30 Apr 202410:13	–	gitee
ATTACKERKB	CVE-2023-36844	17 Aug 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-36846	17 Aug 202320:15	–	attackerkb
ATTACKERKB	CVE-2023-36845	17 Aug 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices allows a attacker to compromise data integrity.	30 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices allows a attacker to compromise data integrity.	30 Aug 202300:00	–	bdu_fstec

Vulners

Node

juniper_networks junosRange21.2–21.2r3-s6

juniper_networks junosRange21.3–21.3r3-s5

juniper_networks junosRange21.4–21.4r3-s5

juniper_networks junosRange22.1–22.1r3-s3

juniper_networks junosRange22.2–22.2r3-s2

juniper_networks junosRange22.3–22.3r2-s2

juniper_networks junosRange22.4–22.4r2-s1

Source	Link
supportportal	www.supportportal.juniper.net/JSA72300
github	www.github.com/watchtowrlabs/juniper-rce_cve-2023-36844
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 39.8

CVSS 210

EPSS0.94278