CVE-2023-36844

MEDIUMCISA KEV

5.3

Description

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R3-S1; * 22.4 versions prior to 22.4R2-S2, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.

CVE Details

CVSS v3.1 Score5.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/17/2023

Last Modified10/24/2025

Sourcekev

Honeypot Sightings0

CISA KEV

VendorJuniper

ProductJunos OS

Vulnerability NameJuniper Junos OS EX Series PHP External Variable Modification Vulnerability

KEV Date Added2023-11-13

Remediation Due Date2023-11-17

Ransomware UseUnknown

Affected Products

juniper:ex2200juniper:ex2200-cjuniper:ex2200-vcjuniper:ex2300juniper:ex2300-24mpjuniper:ex2300-24pjuniper:ex2300-24tjuniper:ex2300-48mpjuniper:ex2300-48pjuniper:ex2300-48tjuniper:ex2300-cjuniper:ex2300mjuniper:ex3200juniper:ex3300juniper:ex3300-vcjuniper:ex3400juniper:ex4200juniper:ex4200-vcjuniper:ex4300juniper:ex4300-24pjuniper:ex4300-24p-sjuniper:ex4300-24tjuniper:ex4300-24t-sjuniper:ex4300-32fjuniper:ex4300-32f-dcjuniper:ex4300-32f-sjuniper:ex4300-48mpjuniper:ex4300-48mp-sjuniper:ex4300-48pjuniper:ex4300-48p-sjuniper:ex4300-48tjuniper:ex4300-48t-afijuniper:ex4300-48t-dcjuniper:ex4300-48t-dc-afijuniper:ex4300-48t-sjuniper:ex4300-48tafijuniper:ex4300-48tdcjuniper:ex4300-48tdc-afijuniper:ex4300-mpjuniper:ex4300-vcjuniper:ex4300mjuniper:ex4400juniper:ex4500juniper:ex4500-vcjuniper:ex4550juniper:ex4550-vcjuniper:ex4550\/vcjuniper:ex4600juniper:ex4600-vcjuniper:ex4650juniper:ex6200juniper:ex6210juniper:ex8200juniper:ex8200-vcjuniper:ex8208juniper:ex8216juniper:ex9200juniper:ex9204juniper:ex9208juniper:ex9214juniper:ex9250juniper:ex9251juniper:ex9253juniper:junos

Weaknesses (CWE)

CWE-473

References

http://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html(sirt@juniper.net)

https://supportportal.juniper.net/JSA72300(sirt@juniper.net)

http://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

https://supportportal.juniper.net/JSA72300(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36844(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.