A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series
and SRX Series
allows an unauthenticated, network-based attacker to remotely execute code.
Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code.
This issue affects Juniper Networks Junos OS on EX Series
and
SRX Series:
* All versions prior to
20.4R3-S9;
* 21.1 versions 21.1R1 and later;
* 21.2 versions prior to 21.2R3-S7;
* 21.3 versions prior to 21.3R3-S5;
* 21.4 versions prior to 21.4R3-S5;
* 22.1 versions
prior to
22.1R3-S4;
* 22.2 versions
prior to
22.2R3-S2;
* 22.3 versions
prior to
22.3R2-S2, 22.3R3-S1;
* 22.4 versions
prior to
22.4R2-S1, 22.4R3;
* 23.2 versions prior to 23.2R1-S1, 23.2R2.
Connections 30
has cited scope1 retained · stored CVE-2023-36845 → Juniper Networks · Junos OSe980681b-f99b-411d-bd60-23e4105b205c
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx11039da572e-6be5-418c-81d7-5e67dd353621
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx4000a05eced7-f229-49e0-9e24-8ccce9cd3d60
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx3809a79321c-ca65-4834-931b-81ee0b76e393
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx345a07c2bb0-3494-4e79-be05-ea8dcb628b34
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx650b6a51c5a-702d-4976-b7e1-9e3bf89a06a0
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx550_hma2d2fa07-399d-4998-9ef0-e9a71f9ed2a1
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx1500bd66c666-0260-455f-8fcf-3152b2db3136
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx5800d522188b-a7bb-4716-8285-b028ea60a2fd
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx240h2c066d03e-0765-4e8e-b63a-da2a20f8222c
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx3403771417b-3aae-4caf-8ee5-8fb91557512f
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx5600ead90928-000e-4d4a-ad56-a8a8ac3dc000
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx42003b63f461-26b5-42f5-beb4-8f2034afed97
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx210f908630a-d105-4cd0-a948-adedc8eee254
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx320532a2379-f64b-4864-ac24-015f81da0915
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx360009b15924-480b-4aa8-a385-3b2c43d74ce3
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx3006daa6831-0990-4ce7-bb55-ebe09322c394
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx550b5c7f110-17ce-49f7-994e-5e6bf9d2df8c
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx460094537d99-0001-46d2-8d09-d25f5df126e3
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx550ma6056831-7d43-4402-9713-d87e99f4f61d
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx540064634ad3-4db1-4e41-a87b-9a879e8e3144
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx1007eacc208-ec2d-4e76-aefd-77ef00794492
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx2209a65377c-39eb-4529-afaf-fdb88453befc
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx4100734dd7a6-82c8-443a-a1b0-4f5e53e526e2
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx1400d67d52de-abc1-466c-8234-10090994c698
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx240mf82b7d6d-cc1b-4e51-a1dd-68ec548f070b
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx50002dcf1f9b-d264-4320-9323-6025e8e248ea
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx34004974e087-8743-482b-a2a1-04775563ca04
has environmental constraint1 retained · stored CVE-2023-36845 → juniper · srx240aa849d6a-dd3a-4b6e-b309-b7a49c7a0fd5
has vulnerable target scope93 retained · stored CVE-2023-36845 → juniper · junos025f83db-1f4b-4dd2-90a1-ece0b8b1f621026e14e6-952f-4215-b7c4-f6ae3374e8230404d7c9-cfd0-452f-8073-07b4ad3a3ea00d97d419-3ba2-48a1-8fd6-be404f7141910daae30b-6dac-400b-96b7-8725741367050e88ed13-6201-448a-8189-917f1a568c3e