Exploit / PoCcritical

New Juniper Junos OS Flaws Expose Devices to Remote Attacks

The Hacker Newsby @TheHackersNewsAug 29, 2023 · 05:59 UTC (Aug 29, 2023)2 min read1

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36844 CVE-2023-36845 CVE-2023-36846 CVE-2023-36847

Tags: cve-2023-36844 cve-2023-36845 cve-2023-36846 cve-2023-36847 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36845 +3 related CVEs CVE-2023-36846 CVE-2023-36844 CVE-2023-36847	Unauthenticated RCE in Juniper J-Web on EX and SRX Series	9.8 group max	95%	KEVPoC ×2	Aug 17, 2023 KEV Nov 13, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Aug 19, 2023 Network Security / Vulnerability Networking hardware company Juniper Networks has released an "out-of-cycle" security update to address multiple flaws in the J-Web component of Junos OS that could be combined to achieve remote code execution on susceptible installations. The four vulnerabilities have a cumulative CVSS rating of 9. 8, making them Critical in severity.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.