peter bassill · operator
$ cve CVE-2023-36845 JSON

CVE-2023-36845 KEV

9.8
CRITICAL · CVSS 3.1 · EPSS 95.1% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2023-11-17.

Description

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code. This issue affects Juniper Networks Junos OS on EX Series and SRX Series: * All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS95.07% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-473
On CISA KEVyes — remediate by 2023-11-17
Public exploitnone known
Published2023-08-17
Last modified2026-06-17

CISA KEV

NameJuniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Added2023-11-13
Due2023-11-17
Vendor / productJuniper / Junos OS
Ransomware usenone reported

Affected (29)

VendorProduct
juniperjunos
junipersrx100
junipersrx110
junipersrx1400
junipersrx1500
junipersrx210
junipersrx220
junipersrx240
junipersrx240h2
junipersrx240m
junipersrx300
junipersrx320
junipersrx340
junipersrx3400
junipersrx345
junipersrx3600
junipersrx380
junipersrx4000
junipersrx4100
junipersrx4200
junipersrx4600
junipersrx5000
junipersrx5400
junipersrx550
junipersrx550 hm
junipersrx550m
junipersrx5600
junipersrx5800
junipersrx650

References

→ the Explorer  ·  watch your stack  ·  NVD