Juniper Junos OS J-Web (EX): [KEV] PHP external variable modification

CVE-2023-36844Firmware, BMC & network fabricKnown exploitedcurated

Impact

**[KEV]** PHP external variable modification; part of the exploited J-Web chain

Who can reach it

Network, unauthenticated

What to do

Junos upgrade with switch failover

References

https://nvd.nist.gov/vuln/detail/CVE-2023-36844

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.