Database/Firmware, BMC & network fabric
Juniper Junos OS J-Web (EX): **[KEV]** Missing authentication on `installAppPackage.php`
CVE-2023-36847Firmware, BMC & network fabricKnown exploitedcurated
Impact
**[KEV]** Missing authentication on installAppPackage.php — unauthenticated file upload to the switch filesystem
Who can reach it
Network, unauthenticated
What to do
Junos upgrade; combined with CVE-2023-36845 this is a pre-auth RCE chain against management switches
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.