Ransomwarehigh
Juniper networking devices under attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-36845+2 related CVEs | Unauthenticated RCE in Juniper J-Web on EX and SRX Series | 9.8 group max | 95% | KEVPoC ×2 | KEV |
| CVE-2023-36851 | Unauthenticated Arbitrary File Upload/Download in Juniper SRX Series J-Web | 5.3 | 1% | KEV | KEV |
| CVE-2023-47246 | Unauthenticated Path Traversal RCE in SysAid On-Premise Server | 9.8 | 99% | KEVRansomwarePoC | KEV |
From the original article
2 min read at helpnetsecurity.com
CISA has ordered US federal agencies to patch five vulnerabilities used by attackers to compromise Juniper networking devices, and to do so by Friday. Most of these bugs are not particularly severe by themselves, but they can be – and have been – chained together by attackers to achieve remote code execution on internet-facing vulnerable devices.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.