CVE-2023-36851
CVSS Score of 10 (low)
Details
Summary
CVE-2023-36851 is a Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series. It allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. The vulnerability specifically affects versions prior to 22.4R2-S2 and 22.4R3, as well as versions prior to 23.2R2. An attacker can exploit this vulnerability by making a specific request to webauth_operation.php without authentication, enabling them to upload arbitrary files via J-Web. The potential danger is a loss of integrity for a certain part of the file system, which could potentially be used to chain with other vulnerabilities.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions