Vulnerability identifier: #VU79688

Vulnerability risk: High

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2023-36845

CWE-ID: CWE-20

Exploitation vector: Network

Exploits in database: 6

• April 5, 2024
  • Automation-for-Juniper-cve-2023-36845 (Simple Automation script for juniper cve-2023-36845) [Github]
• March 22, 2024
  • CVE-2023-36845 (Juniper Firewalls CVE-2023-36845 - RCE) [Github]
• October 2, 2023
  • CVE-2023-36845-POC (CVE-2023-36845 PoC script automates the PoC for CVE-2023-36845 targeting Juniper Networks Junos OS's J-Web component on EX and SRX Series devices. It exploits a PHP flaw, allowing remote modification of the PHPRC variable. Successful e [Github]
• September 29, 2023
  • Junos OS PHPRC Environment Variable Manipulation RCE [Metasploit]
• September 27, 2023
  • CVE-2023-36844_Juniper_RCE (A Proof of Concept for chaining the CVEs [CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847] to achieve Remote Code Execution (phpinfo) in Juniper JunOS within SRX and EX Series products.Modified from original expl [Github]
• September 19, 2023
  • cve-2023-36845-scanner (A go-exploit to scan for Juniper firewalls vulnerable to CVE-2023-36845) [Github]

Impact: Code execution

Vulnerable software:
Juniper Junos OS
Operating systems & Components / Operating system

Vendor: Juniper Networks, Inc.