Live › vulnerability › CVE-2023-36847
Go to dashboardJuniper Junos OS on EX Series switches lets an unauthenticated network attacker send a request to installAppPackage.php in J-Web and upload arbitrary files. The attacker can alter part of the file system, which may be chained into further compromise.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Juniper Junos OS | vendor | – | – |
| juniper junos | vendor | < 20.4 | 20.4 |
| juniper junos | vendor | = 20.4 | – |
| juniper junos | vendor | = 21.1 | – |
| juniper junos | vendor | = 21.2 | – |
| juniper junos | vendor | = 21.3 | – |
| juniper junos | vendor | = 21.4 | – |
| juniper junos | vendor | = 22.1 | – |
| juniper junos | vendor | = 22.2 | – |
| juniper junos | vendor | = 22.3 | – |
| juniper junos | vendor | = 22.4 | – |
Check whether J-Web is enabled on EX Series switches and whether the device runs an affected Junos OS version (unknown which versions the sources list).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
With a specific request to installAppPackage.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of
integrity
for a certain
part of the file system, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on EX Series:
prior to
21.3R3-S5;
prior to
21.4R3-S4;
prior to
22.1R3-S3;
prior to
22.2R3-S1;
prior to
22.3R2-S2, 22.3R3;
prior to
22.4R2-S1, 22.4R3.
This page as .md · .json · in your agent: get_signal("CVE-2023-36847")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.