A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series
and SRX Series
allows an unauthenticated, network-based attacker to control certain, important environments variables.
Utilizing a crafted request an attacker is able to modify a certain PHP environment variable leading to partial loss of integrity, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on SRX Series:
* All versions prior to 21.4R3-S5;
* 22.1 versions
prior to
22.1R3-S4;
* 22.2 versions
prior to
22.2R3-S2;
* 22.3 versions
prior to
22.3R2-S2, 22.3R3-S1;
* 22.4 versions
prior to
22.4R2-S1, 22.4R3;
* 23.2 versions prior to 23.2R1-S1, 23.2R2.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
http://packetstormsecurity.com/files/176969/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
https://supportportal.juniper.net/JSA72300 | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
History
27 Jun 2024, 14:42
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-Other | |
References | () http://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html - Exploit, Third Party Advisory, VDB Entry | |
References | () http://packetstormsecurity.com/files/176969/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html - Exploit, Third Party Advisory, VDB Entry | |
CPE | cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.4:r3-s8:*:*:*:*:*:* cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:* |
17 Aug 2023, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-08-17 20:15
Updated : 2024-06-27 14:42
NVD link : CVE-2023-36845
Mitre link : CVE-2023-36845
CVE.ORG link : CVE-2023-36845
JSON object : View
Products Affected
juniper
- srx345
- junos
- srx550
- srx550m
- srx5800
- ex2300-48p
- ex2300-48t
- ex9253
- ex6200
- srx300
- ex2300-48mp
- ex3300
- ex4550-vc
- srx5000
- srx5600
- ex4300-48tdc
- ex9214
- ex4300-48mp
- ex9208
- srx550_hm
- ex4300m
- srx5400
- ex2200-c
- ex6210
- ex2200-vc
- srx240
- ex4300-48t
- srx1400
- ex4300-48t-dc
- ex4200
- ex4300-32f
- ex4550\/vc
- ex9204
- ex3200
- ex4550
- ex2300
- srx4000
- ex8200-vc
- srx3600
- ex4300-24t-s
- srx650
- ex4300-24p-s
- ex4300-vc
- ex4300-24t
- srx1500
- srx220
- ex4300-32f-dc
- ex4200-vc
- ex9250
- ex4300
- srx320
- srx240h2
- ex3400
- ex4500
- ex4300-48t-dc-afi
- ex9251
- ex4300-mp
- ex4600-vc
- srx4100
- ex8216
- srx110
- srx380
- srx100
- ex2300-24mp
- ex8200
- ex2300-24t
- ex2200
- srx3400
- ex3300-vc
- srx4200
- srx240m
- ex4300-48mp-s
- ex4400
- ex8208
- srx340
- ex4300-32f-s
- ex4300-48t-afi
- ex4300-24p
- srx210
- ex4600
- ex9200
- ex4500-vc
- srx4600
- ex4300-48p
- ex4300-48tdc-afi
- ex4300-48p-s
- ex2300-24p
- ex4300-48t-s
- ex2300m
- ex4300-48tafi
- ex2300-c
- ex4650
CWE