critical·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2023-36845 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Juniper Networks Junos OS affects v. prior to 20.4R3-S9; 21.1 versions 21.1R1 and later; 21.2 versions prior to 21.2R3-S7; 21.3 versions prior to 21.3R3-S5; 21.4 versions prior to 21.4R3-S5; 22.1 versions prior to 22.1R3-S4; 22.2 versions prior to 22.2R3-S2; 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; 22.4 versions prior to 22.4R2-S1, 22.4R3; 23.2 versions prior to 23.2R1-S1, 23.2R2.

Run This Scanner →How to fix it

Est. Time~10 seconds

Scan TypeSingle Scan

Targetsdomain, ipv4, subdomain

CostFree

2.8k

Times Used

continuous scan runs

4.7k

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

CVECVE-2023-36845

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code. This issue affects Juniper Networks Junos OS on EX Series and SRX Series: * All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

Junos OSby Juniper Networks

AFFECTED< 20.4R3-S9→SAFE ✓≥ 20.4R3-S9

Updated Aug 22, 2026View on NVD →

Detail

Juniper Networks Junos OS is an operating system used in EX Series and SRX Series devices. This product is commonly used in enterprise network infrastructures and data centers due to its high performance, scalability, and robust security features. Junos OS allows network administrators to manage their environments using a variety of protocols and tools, including SSH, Telnet, and SNMP.

Recently, a serious vulnerability has been detected in Junos OS that could potentially allow remote code execution. This vulnerability, identified as CVE-2023-36845, enables an unauthenticated attacker to modify the PHP execution environment by setting the variable PHPRC using a crafted request. This can lead to the injection and execution of unauthorized code, putting the system at risk of exploitation.

The consequences of this vulnerability being exploited are dire. An attacker with malicious intent can execute arbitrary commands, causing system instability or unauthorized access. This can lead to data breaches, disruption of services, and sensitive information being stolen. The vulnerability can be particularly damaging in heavily regulated sites such as hospitals, financial institutions, or government buildings.

At s4e.io, we are committed to helping businesses and individuals protect their digital assets and stay informed on the latest threats and vulnerabilities. Our platform offers pro features such as vulnerability assessments, automated patch management, and 24/7 security monitoring. By leveraging our expertise and technology, users can quickly identify and address any security issues in their networks and devices, minimizing the risk of exploitation. Don't wait until it's too late, sign up today and keep your data safe!

REFERENCES