CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-08-17
Juniper Networks Junos OS EX Series J-Web Unauthenticated Arbitrary File Upload Vulnerability (CVE-2023-36847) Analysis and Mitigation Guide
[Affected Scope] Juniper Networks Junos OS on EX Series switches with J-Web interface enabled in specific versions
[Impact] Unauthenticated, network-based attackers can upload arbitrary files via J-Web by targeting 'installAppPackage.php', compromising file system integrity and potentially chaining with other flaws for Remote Code Execution (RCE)
[Mitigation] Upgrade Junos OS to the recommended patched releases, or immediately disable the J-Web service and restrict management access