CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Juniper Networks Junos OS J-Web External Variable Modification Vulnerability (CVE-2023-36845) Remote Code Execution Analysis and Mitigation Guide
[Affected Scope] Juniper Networks Junos OS on EX Series switches and SRX Series firewalls with the J-Web interface enabled
[Impact] An unauthenticated, network-based attacker can modify the PHP execution environment (PHPRC) via crafted HTTP requests, leading to arbitrary code execution and full device compromise
[Mitigation] Immediately upgrade Junos OS to the patched versions, or disable the J-Web interface and restrict access to trusted IP addresses as a temporary workaround
Juniper Networks Junos OS J-Web Local File Inclusion (LFI) and Remote Code Execution Vulnerability (CVE-2020-1631) Analysis and Mitigation Guide
[Affected Scope] Juniper Networks Junos OS devices with HTTP/HTTPS services (J-Web, Web Authentication, Dynamic-VPN, etc.) enabled
[Impact] Unauthenticated attackers can read arbitrary system files, hijack active administrator session tokens, or inject commands into web logs to execute limited commands
[Mitigation] Upgrade Junos OS to the recommended patched release, or disable HTTP/HTTPS and J-Web services if they are not business-critical
Juniper ScreenOS Remote Administrative Access Backdoor Vulnerability (CVE-2015-7755) Analysis and Mitigation Guide
[Affected Scope] Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20
[Impact] Remote attackers can bypass authentication and gain full administrative (root) access to the firewall via SSH or TELNET using a hardcoded master password
[Mitigation] Immediately upgrade ScreenOS to patched versions (6.3.0r21 or the respective 'b' releases) and disable external SSH/TELNET access