Exploit / PoCcriticalExploited in the wild

PoC for no-auth RCE on Juniper firewalls released

Help Net Securityby @zeljkazorzAug 28, 2023 · 00:00 UTC (Aug 28, 2023)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36846 CVE-2023-36847 CVE-2023-36844 CVE-2023-36845

Tags: cve-2023-36846 cve-2023-36847 cve-2023-36844 cve-2023-36845 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36845 +3 related CVEs CVE-2023-36846 CVE-2023-36844 CVE-2023-36847	Unauthenticated RCE in Juniper J-Web on EX and SRX Series	9.8 group max	95%	KEVPoC ×2	Aug 17, 2023 KEV Nov 13, 2023

From the original article

2 min read at helpnetsecurity.com

Researchers have released additional details about the recently patched four vulnerabilities affecting Juniper Networks’ SRX firewalls and EX switches that could allow remote code execution (RCE), as well as a proof-of-concept (PoC) exploit.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.