HTTP: Juniper Networks Junos OS on EX Series J-Web Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Juniper J-Web. A successful attack can lead to arbitrary code execution.

Extended Description

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variablesleading to partial loss of integrity,which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R3-S1; * 22.4 versions prior to 22.4R2-S2, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.

References

CVE: CVE-2023-36847

Short Name

HTTP:CTS:JUNIPER-JWEB-RCE

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Juniper Networks Junos OS on EX Series J-Web Remote Code Execution

Extended Description

References

Found a potential security threat?