Thousands of Juniper Devices Vulnerable to Unauthenticated RCE Flaw

An estimated 12,000 Juniper SRX firewalls and EX switches are vulnerable to a fileless remote code execution flaw that attackers can exploit without authentication.

In August, Juniper disclosed numerous ‘PHP environment variant manipulation' (CVE-2023-36844/CVE-2023-36845) and ‘Missing Authentication for Critical Function' (CVE-2023-36846/CVE-2023-36847) vulnerabilities that by themselves only had a ‘medium' severity rating of 5.3.

However, when chained together, these vulnerabilities became a

Read more

Related Posts

• Recent Juniper Flaws Chained In Attacks Following PoC Exploit Publicationa
• Threat Brief: RCE Vulnerability CVE-2023-3519 on Customer-Managed Citrix Serversa
• PHPFusion Flaw Allows Attackers to Read Critical System Dataa
• Multiple Splunk Enterprise Flaws Let Attackers Execute Arbitrary Codea
• CVE-2023-32560: Critical Remote Code Execution Vulnerabilities in Ivanti Avalanchea