Exploit / PoCcriticalExploited in the wild

CISA adds five vulnerabilities in Juniper devices to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsNov 13, 2023 · 18:51 UTC (Nov 13, 2023)4 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36844 CVE-2023-36845 CVE-2023-36846 CVE-2023-36847 CVE-2023-47246 CVE-2023-36851

Tags: cve-2023-36844 cve-2023-36845 cve-2023-36846 cve-2023-36847 cve-2023-47246 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36845 +3 related CVEs CVE-2023-36846 CVE-2023-36844 CVE-2023-36847	Unauthenticated RCE in Juniper J-Web on EX and SRX Series	9.8 group max	95%	KEVPoC ×2	Aug 17, 2023 KEV Nov 13, 2023
CVE-2023-36851	Unauthenticated Arbitrary File Upload/Download in Juniper SRX Series J-Web	5.3	1%	KEV	Sep 27, 2023 KEV Nov 13, 2023
CVE-2023-47246	Unauthenticated Path Traversal RCE in SysAid On-Premise Server	9.8	99%	KEVRansomwarePoC	Nov 10, 2023 KEV Nov 13, 2023

From the original article

4 min read at securityaffairs.com

US CISA added four vulnerabilities (tracked as CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, and CVE-2023-36847) in Juniper devices to its Known Exploited Vulnerabilities catalog. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.