VulnerabilitycriticalExploited in the wild

CISA Sets a Deadline - Patch Juniper Junos OS Flaws Before November 17

The Hacker Newsby @TheHackersNewsNov 15, 2023 · 00:00 UTC (Nov 15, 2023)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36844 CVE-2023-36845 CVE-2023-36846 CVE-2023-36847 CVE-2023-36851

Tags: cve-2023-36844 cve-2023-36845 cve-2023-36846 cve-2023-36847 cve-2023-36851 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36845 +3 related CVEs CVE-2023-36846 CVE-2023-36844 CVE-2023-36847	Unauthenticated RCE in Juniper J-Web on EX and SRX Series	9.8 group max	95%	KEVPoC ×2	Aug 17, 2023 KEV Nov 13, 2023
CVE-2023-36851	Unauthenticated Arbitrary File Upload/Download in Juniper SRX Series J-Web	5.3	1%	KEV	Sep 27, 2023 KEV Nov 13, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Nov 14, 2023 Cyber Attack / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has given a November 17, 2023, deadline for federal agencies and organizations to apply mitigations to secure against a number of security flaws in Juniper Junos OS that came to light in August.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.