Vulnerabilitycritical

Four Juniper Junos OS flaws can be chained to remotely hack devices

Security Affairsby @securityaffairsAug 20, 2023 · 08:33 UTC (Aug 20, 2023)2 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36844 CVE-2023-36845 CVE-2023-36846 CVE-2023-36847

Tags: cve-2023-36844 cve-2023-36845 cve-2023-36846 cve-2023-36847 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36845 +3 related CVEs CVE-2023-36846 CVE-2023-36844 CVE-2023-36847	Unauthenticated RCE in Juniper J-Web on EX and SRX Series	9.8 group max	95%	KEVPoC ×2	Aug 17, 2023 KEV Nov 13, 2023

From the original article

2 min read at securityaffairs.com

Juniper Networks addressed multiple flaws in the J-Web component of Junos OS that could be chained to achieve remote code execution. Juniper Networks has released an “out-of-cycle” security update to address four vulnerabilities in the J-Web component of Junos OS. The vulnerabilities could be chained to achieve remote code execution on vulnerable appliances.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.