EXPOSURES › CVE-2023-36844
CVE-2023-36844
HIGH ⌖ ON CISA KEV · EXPLOITEDJuniper Junos OS EX Series PHP External Variable Modification Vulnerability
An unauthenticated attacker can modify PHP environment variables on Juniper Junos OS EX Series, leading to partial loss of integrity and potential chaining to other vulnerabilities. This vulnerability allows remote code execution and has been actively exploited in the wild.
Shame score — The vulnerability allows remote code execution and has been actively exploited in the wild, indicating a significant security risk.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial loss of integrity, which may allow chaining to other vulnerabilities.
| PRODUCT | STATUS |
|---|---|
| Juniper Mist Juniper Networks |
In Process |