漏洞描述
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
vulncheck.comhttps://vulncheck.com/blog/juniper-cve-2023-36845↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-36845↗labs.watchtowr.comhttps://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/↗packetstormsecurity.comhttp://packetstormsecurity.com/files/174865/Juniper-SRX-Firewall-EX-Switch-Remote-Code-Execution.html↗supportportal.juniper.nethttps://supportportal.juniper.net/JSA72300↗