Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Juniper Junos OS J-Web RCE (CVE-2023-36845/CVE-2023-36846) - Vulnerability Database

Juniper Junos OS J-Web RCE (CVE-2023-36845/CVE-2023-36846)

Description

Multiple vulnerabilities in J-Web of Juniper could allow an unauthenticated remote attacker to execute artibirary code and compormise the device.

Remediation

Upgrade to the latest version of Juniper Junos OS J-Web.

References

2023-08 Out-of-Cycle Security Bulletin: Junos OS: SRX Series and EX Series: Multiple vulnerabilities in J-Web can be combined to allow a preAuth Remote Code Execution
CVE-2023-36844 And Friends: RCE In Juniper Devices
Fileless Remote Code Execution on Juniper Firewalls

Related Vulnerabilities

Check for apache versions up to 1.3.25, 2.0.38 High
Common tags: Code Execution
Drupal Core 7.x Remote Code Execution (7.0 - 7.58) High
Common tags: Code Execution
Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.7) High
Common tags: Code Execution
Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.4.8) High
Common tags: Code Execution
Drupal Core 8.6.x Remote Code Execution (8.6.0 - 8.6.9) High
Common tags: Code Execution

Severity

Critical

Classification

CVE-2023-36845
CVE-2023-36846
CWE-473
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Code Execution