Lucene search

[email protected]CVE-2023-36851

HistorySep 27, 2023 - 3:18 p.m.

CVE-2023-36851

2023-09-2715:18:54

CWE-306

[email protected]

web.nvd.nist.gov

246

In Wild

cve-2023-36851

vulnerability

juniper networks

junos os

srx series

authentication

file system integrity

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

JSON

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.

With a specific request to

webauth_operation.php

that doesn’t require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of

integrity or confidentiality, which may allow chaining to other vulnerabilities.

This issue affects Juniper Networks Junos OS on SRX Series:

21.2 versions prior to 21.2R3-S8;

21.4

versions prior to

21.4R3-S6;

22.1

versions prior to

22.1R3-S5;

22.2

versions prior to

22.2R3-S3;

22.3

versions prior to

22.3R3-S2;

22.4 versions prior to 22,4R2-S2, 22.4R3;
23.2 versions prior to

23.2R1-S2, 23.2R2.

Affected configurations

NVD

Node

juniperex2200Match-

juniperex2200-cMatch-

juniperex2200-vcMatch-

juniperex2300Match-

juniperex2300-24mpMatch-

juniperex2300-24pMatch-

juniperex2300-24tMatch-

juniperex2300-48mpMatch-

juniperex2300-48pMatch-

juniperex2300-48tMatch-

juniperex2300-cMatch-

juniperex2300mMatch-

juniperex3200Match-

juniperex3300Match-

juniperex3300-vcMatch-

juniperex3400Match-

juniperex4200Match-

juniperex4200-vcMatch-

juniperex4300Match-

juniperex4300-24pMatch-

juniperex4300-24p-sMatch-

juniperex4300-24tMatch-

juniperex4300-24t-sMatch-

juniperex4300-32fMatch-

juniperex4300-32f-dcMatch-

juniperex4300-32f-sMatch-

juniperex4300-48mpMatch-

juniperex4300-48mp-sMatch-

juniperex4300-48pMatch-

juniperex4300-48p-sMatch-

juniperex4300-48tMatch-

juniperex4300-48t-afiMatch-

juniperex4300-48t-dcMatch-

juniperex4300-48t-dc-afiMatch-

juniperex4300-48t-sMatch-

juniperex4300-48tafiMatch-

juniperex4300-48tdcMatch-

juniperex4300-48tdc-afiMatch-

juniperex4300-mpMatch-

juniperex4300-vcMatch-

juniperex4300mMatch-

juniperex4400Match-

juniperex4500Match-

juniperex4500-vcMatch-

juniperex4550Match-

juniperex4550-vcMatch-

juniperex4550\/vcMatch-

juniperex4600Match-

juniperex4600-vcMatch-

juniperex4650Match-

juniperex6200Match-

juniperex6210Match-

juniperex8200Match-

juniperex8200-vcMatch-

juniperex8208Match-

juniperex8216Match-

juniperex9200Match-

juniperex9204Match-

juniperex9208Match-

juniperex9214Match-

juniperex9250Match-

juniperex9251Match-

juniperex9253Match-

junipersrx100Match-

junipersrx110Match-

junipersrx1400Match-

junipersrx1500Match-

junipersrx210Match-

junipersrx220Match-

junipersrx240Match-

junipersrx240h2Match-

junipersrx240mMatch-

junipersrx300Match-

junipersrx320Match-

junipersrx340Match-

junipersrx3400Match-

junipersrx345Match-

junipersrx3600Match-

junipersrx380Match-

junipersrx4000Match-

junipersrx4100Match-

junipersrx4200Match-

junipersrx4600Match-

junipersrx5000Match-

junipersrx5400Match-

junipersrx550Match-

junipersrx550_hmMatch-

junipersrx550mMatch-

junipersrx5600Match-

junipersrx5800Match-

junipersrx650Match-

AND

juniperjunosRange<20.4

juniperjunosMatch20.4-

juniperjunosMatch20.4r1

juniperjunosMatch20.4r1-s1

juniperjunosMatch20.4r2

juniperjunosMatch20.4r2-s1

juniperjunosMatch20.4r2-s2

juniperjunosMatch20.4r3

juniperjunosMatch20.4r3-s1

juniperjunosMatch20.4r3-s2

juniperjunosMatch20.4r3-s3

juniperjunosMatch20.4r3-s4

juniperjunosMatch20.4r3-s5

juniperjunosMatch20.4r3-s6

juniperjunosMatch20.4r3-s7

juniperjunosMatch20.4r3-s8

juniperjunosMatch21.1r1

juniperjunosMatch21.1r1-s1

juniperjunosMatch21.1r2

juniperjunosMatch21.1r2-s1

juniperjunosMatch21.1r2-s2

juniperjunosMatch21.1r3

juniperjunosMatch21.1r3-s1

juniperjunosMatch21.1r3-s2

juniperjunosMatch21.1r3-s3

juniperjunosMatch21.1r3-s4

juniperjunosMatch21.1r3-s5

juniperjunosMatch21.2-

juniperjunosMatch21.2r1

juniperjunosMatch21.2r1-s1

juniperjunosMatch21.2r1-s2

juniperjunosMatch21.2r2

juniperjunosMatch21.2r2-s1

juniperjunosMatch21.2r2-s2

juniperjunosMatch21.2r3

juniperjunosMatch21.2r3-s1

juniperjunosMatch21.2r3-s2

juniperjunosMatch21.2r3-s3

juniperjunosMatch21.2r3-s4

juniperjunosMatch21.2r3-s5

juniperjunosMatch21.2r3-s6

juniperjunosMatch21.3-

juniperjunosMatch21.3r1

juniperjunosMatch21.3r1-s1

juniperjunosMatch21.3r1-s2

juniperjunosMatch21.3r2

juniperjunosMatch21.3r2-s1

juniperjunosMatch21.3r2-s2

juniperjunosMatch21.3r3

juniperjunosMatch21.3r3-s1

juniperjunosMatch21.3r3-s2

juniperjunosMatch21.3r3-s3

juniperjunosMatch21.3r3-s4

juniperjunosMatch21.4-

juniperjunosMatch21.4r1

juniperjunosMatch21.4r1-s1

juniperjunosMatch21.4r1-s2

juniperjunosMatch21.4r2

juniperjunosMatch21.4r2-s1

juniperjunosMatch21.4r2-s2

juniperjunosMatch21.4r3

juniperjunosMatch21.4r3-s1

juniperjunosMatch21.4r3-s2

juniperjunosMatch21.4r3-s3

juniperjunosMatch21.4r3-s4

juniperjunosMatch22.1r1

juniperjunosMatch22.1r1-s1

juniperjunosMatch22.1r1-s2

juniperjunosMatch22.1r2

juniperjunosMatch22.1r2-s1

juniperjunosMatch22.1r2-s2

juniperjunosMatch22.1r3

juniperjunosMatch22.1r3-s1

juniperjunosMatch22.1r3-s2

juniperjunosMatch22.1r3-s3

juniperjunosMatch22.2r1

juniperjunosMatch22.2r1-s1

juniperjunosMatch22.2r1-s2

juniperjunosMatch22.2r2

juniperjunosMatch22.2r2-s1

juniperjunosMatch22.2r2-s2

juniperjunosMatch22.2r3

juniperjunosMatch22.2r3-s1

juniperjunosMatch22.3r1

juniperjunosMatch22.3r1-s1

juniperjunosMatch22.3r1-s2

juniperjunosMatch22.3r2

juniperjunosMatch22.3r2-s1

juniperjunosMatch22.4r1

juniperjunosMatch22.4r1-s1

juniperjunosMatch22.4r1-s2

juniperjunosMatch22.4r2

juniperjunosMatch23.2r1

CPENameOperatorVersion
juniper:junosjuniper junoslt20.4
juniper:junosjuniper junoseq21.1
juniper:junosjuniper junoseq21.2
juniper:junosjuniper junoseq21.3
juniper:junosjuniper junoseq21.4
juniper:junosjuniper junoseq22.1
juniper:junosjuniper junoseq22.2
juniper:junosjuniper junoseq22.3
juniper:junosjuniper junoseq22.4
juniper:junosjuniper junoseq23.2

CPE	Name	Operator	Version
juniper:junos	juniper junos	lt	20.4
juniper:junos	juniper junos	eq	21.1
juniper:junos	juniper junos	eq	21.2
juniper:junos	juniper junos	eq	21.3
juniper:junos	juniper junos	eq	21.4
juniper:junos	juniper junos	eq	22.1
juniper:junos	juniper junos	eq	22.2
juniper:junos	juniper junos	eq	22.3
juniper:junos	juniper junos	eq	22.4
juniper:junos	juniper junos	eq	23.2

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "SRX Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "21.2R3-S8",
        "status": "affected",
        "version": "21.2",
        "versionType": "semver"
      },
      {
        "lessThan": "21.4R3-S6",
        "status": "affected",
        "version": "21.4",
        "versionType": "semver"
      },
      {
        "lessThan": "22.1R3-S5",
        "status": "affected",
        "version": "22.1",
        "versionType": "semver"
      },
      {
        "lessThan": "22.2R3-S3",
        "status": "affected",
        "version": "22.2",
        "versionType": "semver"
      },
      {
        "lessThan": "22.3R3-S2",
        "status": "affected",
        "version": "22.3",
        "versionType": "semver"
      },
      {
        "lessThan": "22.4R2-S2, 22.4R3",
        "status": "affected",
        "version": "22.4",
        "versionType": "semver"
      },
      {
        "lessThan": "23.2R1-S2, 23.2R2",
        "status": "affected",
        "version": "23.2",
        "versionType": "semver"
      }
    ]
  }
]