Live › vulnerability › CVE-2023-36846
Go to dashboardJuniper Junos OS on SRX firewalls has a J-Web flaw where a request to user.php skips authentication and lets an attacker upload arbitrary files. The sources say this is exploited in the wild and can chain into further flaws.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Juniper Junos OS | vendor | – | – |
| juniper junos | vendor | < 20.4 | 20.4 |
| juniper junos | vendor | = 20.4 | – |
| juniper junos | vendor | = 21.1 | – |
| juniper junos | vendor | = 21.2 | – |
| juniper junos | vendor | = 21.3 | – |
| juniper junos | vendor | = 21.4 | – |
| juniper junos | vendor | = 22.1 | – |
| juniper junos | vendor | = 22.2 | – |
| juniper junos | vendor | = 22.3 | – |
| juniper junos | vendor | = 22.4 | – |
Unknown from the sources.
Apply the Juniper mitigation for CVE-2023-36846 per vendor instructions, or stop using the affected product if no mitigation is available.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
With a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of
integrity
for a certain
part of the file system, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on SRX Series:
prior to
21.3R3-S5;
prior to
21.4R3-S5;
prior to
22.1R3-S3;
prior to
22.2R3-S2;
prior to
22.3R2-S2, 22.3R3;
prior to
22.4R2-S1, 22.4R3.
This page as .md · .json · in your agent: get_signal("CVE-2023-36846")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.