VulnerabilitycriticalExploited in the wild

Juniper Networks fixes flaws leading to RCE in firewalls and switches

Help Net Securityby @helpnetsecurityAug 29, 2023 · 18:24 UTC (Aug 29, 2023)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36844 CVE-2023-36845 CVE-2023-36846 CVE-2023-36847

Tags: cve-2023-36844 cve-2023-36845 cve-2023-36846 cve-2023-36847 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36845 +3 related CVEs CVE-2023-36846 CVE-2023-36844 CVE-2023-36847	Unauthenticated RCE in Juniper J-Web on EX and SRX Series	9.8 group max	95%	KEVPoC ×2	Aug 17, 2023 KEV Nov 13, 2023

From the original article

2 min read at helpnetsecurity.com

Juniper Networks has fixed four vulnerabilities (CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847) in Junos OS that, if chained together, could allow attackers to achieve remote code execution (RCE) on the company’s SRX firewalls and EX switches. Junos OS is an operating system based on Linux and FreeBSD that runs on Juniper Networks firewalls, network switches and other security devices.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.