Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

Threat actors started exploiting Juniper flaws shortly after PoC release

Security Affairsby @securityaffairs ()2 min read3 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-36845
+3 related CVEs
Unauthenticated RCE in Juniper J-Web on EX and SRX Series
9.8
group max
95%KEVPoC ×2
KEV

From the original article

2 min read at securityaffairs.com

Threat actors started using the exploit chain in attacks on Juniper EX switches and SRX firewalls shortly after the release of the PoC code. This week, watchTowr Labs security researchers published a proof-of-concept exploit (PoC) exploit code for vulnerabilities in Juniper SRX firewalls. An unauthenticated attacker can chain the vulnerabilities to gain remote code execution in Juniper JunOS on vulnerable devices.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.