Live › vulnerability › CVE-2023-36845
Go to dashboardJ-Web on Junos OS EX and SRX lets an unauthenticated network attacker set PHPRC with a crafted request and run code (CVSS 9.8). Only devices with J-Web enabled (system services web-management http or https) are exposed. Juniper confirmed exploitation in the wild on 2023-11-08, and a one-request public PoC exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Juniper Junos OS | vendor | – | – |
| Junos OS (EX Series, SRX Series) | vendor | < 20.4R3-S9; 21.1 all; 21.2 < 21.2R3-S7; 21.3 < 21.3R3-S5; 21.4 < 21.4R3-S5; 22.1 < 22.1R3-S4; 22.2 < 22.2R3-S2; 22.3 < 22.3R2-S2, 22.3R3-S1; 22.4 < 22.4R2-S1, 22.4R3; 23.2 < 23.2R1-S1, 23.2R2 | 20.4R3-S9, 21.2R3-S7, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1-S1, 23.2R2, 23.4R1 |
| juniper junos | vendor | < 20.4 | 20.4 |
| juniper junos | vendor | = 20.4 | – |
| juniper junos | vendor | = 21.1 | – |
| juniper junos | vendor | = 21.2 | – |
| juniper junos | vendor | = 21.3 | – |
| juniper junos | vendor | = 21.4 | – |
| juniper junos | vendor | = 22.1 | – |
| juniper junos | vendor | = 22.2 | – |
| juniper junos | vendor | = 22.3 | – |
| juniper junos | vendor | = 22.4 | – |
| juniper junos | vendor | = 23.2 | – |
show configuration system services web-management on the deviceshow version and compare to the fixed releasesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series
and SRX Series
allows an unauthenticated, network-based attacker to remotely execute code.
Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code.
This issue affects Juniper Networks Junos OS on EX Series
and
SRX Series:
20.4R3-S9;
prior to
22.1R3-S4;
prior to
22.2R3-S2;
prior to
22.3R2-S2, 22.3R3-S1;
prior to
22.4R2-S1, 22.4R3;
This page as .md · .json · in your agent: get_signal("CVE-2023-36845")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.