CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-47246 SysAid Server Path Traversal Vulnerability CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability CVE-2023-36845...

Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to...

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the P...

Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an...

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is...

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauthoperation.php that doesn't require authentication, an...

Juniper Networks Junos Router PPMD DoS

The vulnerability of the PPMD module in Juniper Networks Junos routers of the MX series operating systems is related to improper handling of indeterminate values. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Juniper Networks Junos OS SRX DoS

The vulnerability of the flow processing daemon flowd in Juniper Networks’ Junos OS for SRX Series devices stems from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Control Protocol Director DoS

The vulnerability of the Control Protocol Layer 2 l2cpd in Juniper Networks’ Junos and JunOS Evolved operating systems is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks Routing Protocol Demon DoS

The vulnerability of the Routing Protocol Data RPD in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow attackers to cause service failures...

Juniper Networks’ Junos OS Connectivity Fault Management DoS

The vulnerability of the Connectivity Fault Management CFM function in Juniper Networks’ Junos OS routers of the MX series is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow a malicious actor to cause service...

Juniper Junos OS Vulnerability (JSA73148)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73148 advisory. - An Improper Input Validation vulnerability in the VxLAN packet forwarding engine PFE of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices allows an...

Juniper Networks J-Web Code Execution

The vulnerability of the J-Web interface in Juniper Networks Junos OS systems is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Juniper Networks Junos OS SRX Deep Packet Inspection Bypass

The vulnerability of Juniper Networks’ Junos OS routers of the SRX series is related to errors during authentication processes. Exploiting this vulnerability can allow a malicious actor to bypass Juniper’s Deep Packet Inspection JDPI rules...

Juniper Junos OS Vulnerability (JSA73151)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73151 advisory. - An Exposure of Sensitive Information vulnerability in the ' CVE-2023-44187 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Juniper Junos OS Vulnerability (JSA73146)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73146 advisory. - An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks allows an attacker to cause a Denial of Service DoS to the device upon...

Juniper Junos OS Vulnerability (JSA73170)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73170 advisory. - An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon rpd Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS DoS Vulnerability (JSA73174)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73174 advisory. - An Improper Handling of Inconsistent Special Elements vulnerability in the Junos Services Framework jsf module of Juniper Networks Junos OS allows an unauthenticated netwo...

Juniper Networks’ Junos OS Evolved DoS

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS Evolved operating system is related to incorrect checking of the return value of methods or functions. Exploiting this vulnerability can allow an attacker to cause a service failure...

Juniper Networks Junos OS DoS

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...