{"history":[{"alert":0,"cve":"CVE-2023-36846","id":22526,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.93473, \"percentile\": 0.99842}"},{"alert":0,"cve":"CVE-2023-36846","id":20145,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.93473, \"percentile\": 0.99841}"},{"alert":0,"cve":"CVE-2023-36846","id":18111,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.93473, \"percentile\": 0.9984}"},{"alert":0,"cve":"CVE-2023-36846","id":16175,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.93473, \"percentile\": 0.99841}"},{"alert":0,"cve":"CVE-2023-36846","id":14153,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.93473, \"percentile\": 0.9984}"},{"alert":0,"cve":"CVE-2023-36846","id":11935,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.93473, \"percentile\": 0.9984}"},{"alert":0,"cve":"CVE-2023-36846","id":9921,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.93473, \"percentile\": 0.9984}"},{"alert":0,"cve":"CVE-2023-36846","id":7469,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.93473, \"percentile\": 0.9984}"},{"alert":1,"cve":"CVE-2023-36846","id":6246,"kind":"cna","observed_at":1793809200,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T17:01:09.701Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"vendor-advisory\", \"mitigation\", \"x_transferred\"], \"url\": \"https://supportportal.juniper.net/JSA72300\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2023-36846\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2023-11-15T16:40:41.113537Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2023-11-13\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36846\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:40.458Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36846\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2023-11-13T00:00:00.000Z\", \"value\": \"CVE-2023-36846 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"platforms\": [\"SRX Series\"], \"product\": \"Junos OS\", \"vendor\": \"Juniper Networks\", \"versions\": [{\"lessThan\": \"20.4R3-S8\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"21.1*\", \"status\": \"affected\", \"version\": \"21.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"21.2R3-S6\", \"status\": \"affected\", \"version\": \"21.2\", \"versionType\": \"semver\"}, {\"lessThan\": \"21.3R3-S5\", \"status\": \"affected\", \"version\": \"21.3\", \"versionType\": \"semver\"}, {\"lessThan\": \"21.4R3-S5\", \"status\": \"affected\", \"version\": \"21.4\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.1R3-S3\", \"status\": \"affected\", \"version\": \"22.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.2R3-S2\", \"status\": \"affected\", \"version\": \"22.2\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.3R2-S2, 22.3R3\", \"status\": \"affected\", \"version\": \"22.3\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.4R2-S1, 22.4R3\", \"status\": \"affected\", \"version\": \"22.4\", \"versionType\": \"semver\"}]}], \"configurations\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"<p>The following minimal configuration is necessary:</p><code>&nbsp; [system services web-management http]</code><p>or</p><code>&nbsp; [system services web-management https]</code><br>\"}], \"value\": \"The following minimal configuration is necessary:\\n\\n\\u00a0 [system services web-management http]or\\n\\n\\u00a0 [system services web-management https]\"}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"LYS, working with DEVCORE Internship Program\"}], \"datePublic\": \"2023-08-17T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.<br><br>\\n\\nWith a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of \\n\\n<span style=\\\"background-color: rgb(255, 255, 255);\\\">integrity</span>\\n\\nfor a certain&nbsp;\\n\\n<span style=\\\"background-color: rgb(255, 255, 255);\\\">part of the&nbsp;</span>file system, <span style=\\\"background-color: rgb(255, 255, 255);\\\">which may allow chaining to other vulnerabilities.</span>\\n\\n<br><p>This issue affects Juniper Networks Junos OS on SRX Series:</p><p></p><ul><li>All versions prior to 20.4R3-S8;</li><li>21.1 versions 21.1R1 and later;</li><li>21.2 versions prior to 21.2R3-S6;</li><li>21.3 versions \\n\\nprior to \\n\\n 21.3R3-S5;</li><li>21.4 versions \\n\\nprior to \\n\\n21.4R3-S5;</li><li>22.1 versions \\n\\nprior to \\n\\n22.1R3-S3;</li><li>22.2 versions \\n\\nprior to \\n\\n22.2R3-S2;</li><li>22.3 versions \\n\\nprior to \\n\\n22.3R2-S2, 22.3R3;</li><li>22.4 versions \\n\\nprior to \\n\\n22.4R2-S1, 22.4R3.</li></ul><p></p>\"}], \"value\": \"A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.\\n\\n\\n\\nWith a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of \\n\\nintegrity\\n\\nfor a certain\\u00a0\\n\\npart of the\\u00a0file system, which may allow chaining to other vulnerabilities.\\n\\n\\nThis issue affects Juniper Networks Junos OS on SRX Series:\\n\\n\\n\\n  *  All versions prior to 20.4R3-S8;\\n  *  21.1 versions 21.1R1 and later;\\n  *  21.2 versions prior to 21.2R3-S6;\\n  *  21.3 versions \\n\\nprior to \\n\\n 21.3R3-S5;\\n  *  21.4 versions \\n\\nprior to \\n\\n21.4R3-S5;\\n  *  22.1 versions \\n\\nprior to \\n\\n22.1R3-S3;\\n  *  22.2 versions \\n\\nprior to \\n\\n22.2R3-S2;\\n  *  22.3 versions \\n\\nprior to \\n\\n22.3R2-S2, 22.3R3;\\n  *  22.4 versions \\n\\nprior to \\n\\n22.4R2-S1, 22.4R3.\"}], \"exploits\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.<br>\"}], \"value\": \"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"NONE\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-306\", \"description\": \"CWE-306 Missing Authentication for Critical Function\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-09-26T19:59:21.014Z\", \"orgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"shortName\": \"juniper\"}, \"references\": [{\"tags\": [\"vendor-advisory\", \"mitigation\"], \"url\": \"https://supportportal.juniper.net/JSA72300\"}], \"solutions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"The following software releases have been updated to resolve this specific issue: \\n\\n<span style=\\\"background-color: rgb(255, 255, 255);\\\">20.4R3-S8, 21.2R3-S6, 21.3R3-S5*, 21.4R3-S5*, 22.1R3-S3, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3*, 23.2R1</span>, and all subsequent releases.<br>*Pending Publication<br>\"}], \"value\": \"The following software releases have been updated to resolve this specific issue: \\n\\n20.4R3-S8, 21.2R3-S6, 21.3R3-S5*, 21.4R3-S5*, 22.1R3-S3, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3*, 23.2R1, and all subsequent releases.\\n*Pending Publication\"}], \"source\": {\"defect\": [\"1735389\"], \"discovery\": \"EXTERNAL\"}, \"title\": \"Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files\", \"workarounds\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"Disable J-Web, or limit access to only trusted hosts.<br>\"}], \"value\": \"Disable J-Web, or limit access to only trusted hosts.\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"assignerShortName\": \"juniper\", \"cveId\": \"CVE-2023-36846\", \"datePublished\": \"2023-08-17T19:18:00.406Z\", \"dateReserved\": \"2023-06-27T16:17:25.277Z\", \"dateUpdated\": \"2025-10-21T23:05:40.458Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2023-36846","id":5246,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.93473, \"percentile\": 0.99839}"},{"alert":0,"cve":"CVE-2023-36846","id":3028,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.93473, \"percentile\": 0.99839}"},{"alert":1,"cve":"CVE-2023-36846","id":737,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-36846\", \"cwes\": [\"CWE-306\"], \"dateAdded\": \"2023-11-13\", \"dueDate\": \"2023-11-17\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36846\", \"product\": \"Junos OS\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.\", \"vendorProject\": \"Juniper\", \"vulnerabilityName\": \"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","platforms":["SRX Series"],"product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"20.4R3-S8","status":"affected","version":"0","versionType":"semver"},{"lessThan":"21.1*","status":"affected","version":"21.1","versionType":"semver"},{"lessThan":"21.2R3-S6","status":"affected","version":"21.2","versionType":"semver"},{"lessThan":"21.3R3-S5","status":"affected","version":"21.3","versionType":"semver"},{"lessThan":"21.4R3-S5","status":"affected","version":"21.4","versionType":"semver"},{"lessThan":"22.1R3-S3","status":"affected","version":"22.1","versionType":"semver"},{"lessThan":"22.2R3-S2","status":"affected","version":"22.2","versionType":"semver"},{"lessThan":"22.3R2-S2, 22.3R3","status":"affected","version":"22.3","versionType":"semver"},{"lessThan":"22.4R2-S1, 22.4R3","status":"affected","version":"22.4","versionType":"semver"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-02T17:01:09.701Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["vendor-advisory","mitigation","x_transferred"],"url":"https://supportportal.juniper.net/JSA72300"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2023-36846","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2023-11-15T16:40:41.113537Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2023-11-13","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36846"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:40.458Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36846"}],"timeline":[{"lang":"en","time":"2023-11-13T00:00:00.000Z","value":"CVE-2023-36846 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","platforms":["SRX Series"],"product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"20.4R3-S8","status":"affected","version":"0","versionType":"semver"},{"lessThan":"21.1*","status":"affected","version":"21.1","versionType":"semver"},{"lessThan":"21.2R3-S6","status":"affected","version":"21.2","versionType":"semver"},{"lessThan":"21.3R3-S5","status":"affected","version":"21.3","versionType":"semver"},{"lessThan":"21.4R3-S5","status":"affected","version":"21.4","versionType":"semver"},{"lessThan":"22.1R3-S3","status":"affected","version":"22.1","versionType":"semver"},{"lessThan":"22.2R3-S2","status":"affected","version":"22.2","versionType":"semver"},{"lessThan":"22.3R2-S2, 22.3R3","status":"affected","version":"22.3","versionType":"semver"},{"lessThan":"22.4R2-S1, 22.4R3","status":"affected","version":"22.4","versionType":"semver"}]}],"configurations":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>The following minimal configuration is necessary:</p><code>&nbsp; [system services web-management http]</code><p>or</p><code>&nbsp; [system services web-management https]</code><br>"}],"value":"The following minimal configuration is necessary:\n\n\u00a0 [system services web-management http]or\n\n\u00a0 [system services web-management https]"}],"credits":[{"lang":"en","type":"finder","value":"LYS, working with DEVCORE Internship Program"}],"datePublic":"2023-08-17T16:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.<br><br>\n\nWith a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of \n\n<span style=\"background-color: rgb(255, 255, 255);\">integrity</span>\n\nfor a certain&nbsp;\n\n<span style=\"background-color: rgb(255, 255, 255);\">part of the&nbsp;</span>file system, <span style=\"background-color: rgb(255, 255, 255);\">which may allow chaining to other vulnerabilities.</span>\n\n<br><p>This issue affects Juniper Networks Junos OS on SRX Series:</p><p></p><ul><li>All versions prior to 20.4R3-S8;</li><li>21.1 versions 21.1R1 and later;</li><li>21.2 versions prior to 21.2R3-S6;</li><li>21.3 versions \n\nprior to \n\n 21.3R3-S5;</li><li>21.4 versions \n\nprior to \n\n21.4R3-S5;</li><li>22.1 versions \n\nprior to \n\n22.1R3-S3;</li><li>22.2 versions \n\nprior to \n\n22.2R3-S2;</li><li>22.3 versions \n\nprior to \n\n22.3R2-S2, 22.3R3;</li><li>22.4 versions \n\nprior to \n\n22.4R2-S1, 22.4R3.</li></ul><p></p>"}],"value":"A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.\n\n\n\nWith a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of \n\nintegrity\n\nfor a certain\u00a0\n\npart of the\u00a0file system, which may allow chaining to other vulnerabilities.\n\n\nThis issue affects Juniper Networks Junos OS on SRX Series:\n\n\n\n  *  All versions prior to 20.4R3-S8;\n  *  21.1 versions 21.1R1 and later;\n  *  21.2 versions prior to 21.2R3-S6;\n  *  21.3 versions \n\nprior to \n\n 21.3R3-S5;\n  *  21.4 versions \n\nprior to \n\n21.4R3-S5;\n  *  22.1 versions \n\nprior to \n\n22.1R3-S3;\n  *  22.2 versions \n\nprior to \n\n22.2R3-S2;\n  *  22.3 versions \n\nprior to \n\n22.3R2-S2, 22.3R3;\n  *  22.4 versions \n\nprior to \n\n22.4R2-S1, 22.4R3."}],"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.<br>"}],"value":"Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2023-09-26T19:59:21.014Z","orgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","shortName":"juniper"},"references":[{"tags":["vendor-advisory","mitigation"],"url":"https://supportportal.juniper.net/JSA72300"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The following software releases have been updated to resolve this specific issue: \n\n<span style=\"background-color: rgb(255, 255, 255);\">20.4R3-S8, 21.2R3-S6, 21.3R3-S5*, 21.4R3-S5*, 22.1R3-S3, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3*, 23.2R1</span>, and all subsequent releases.<br>*Pending Publication<br>"}],"value":"The following software releases have been updated to resolve this specific issue: \n\n20.4R3-S8, 21.2R3-S6, 21.3R3-S5*, 21.4R3-S5*, 22.1R3-S3, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3*, 23.2R1, and all subsequent releases.\n*Pending Publication"}],"source":{"defect":["1735389"],"discovery":"EXTERNAL"},"title":"Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files","workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Disable J-Web, or limit access to only trusted hosts.<br>"}],"value":"Disable J-Web, or limit access to only trusted hosts."}],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}}},"cveMetadata":{"assignerOrgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","assignerShortName":"juniper","cveId":"CVE-2023-36846","datePublished":"2023-08-17T19:18:00.406Z","dateReserved":"2023-06-27T16:17:25.277Z","dateUpdated":"2025-10-21T23:05:40.458Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794241201,"cve":"CVE-2023-36846","description":"A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.\n\n\n\nWith a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of \n\nintegrity\n\nfor a certain\u00a0\n\npart of the\u00a0file system, which may allow chaining to other vulnerabilities.\n\n\nThis issue affects Juniper Networks Junos OS on SRX Series:\n\n\n\n  *  All versions prior to 20.4R3-S8;\n  *  21.1 versions 21.1R1 and later;\n  *  21.2 versions prior to 21.2R3-S6;\n  *  21.3 versions \n\nprior to \n\n 21.3R3-S5;\n  *  21.4 versions \n\nprior to \n\n21.4R3-S5;\n  *  22.1 versions \n\nprior to \n\n22.1R3-S3;\n  *  22.2 versions \n\nprior to \n\n22.2R3-S2;\n  *  22.3 versions \n\nprior to \n\n22.3R2-S2, 22.3R3;\n  *  22.4 versions \n\nprior to \n\n22.4R2-S1, 22.4R3.","epss":{"date":"2026-11-12","epss":0.93473,"percentile":0.99842},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-36846","cwes":["CWE-306"],"dateAdded":"2023-11-13","dueDate":"2023-11-17","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36846","product":"Junos OS","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.","vendorProject":"Juniper","vulnerabilityName":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability"},"kev_checked":1794522003,"products":"Juniper Networks Junos OS","references":["https://supportportal.juniper.net/JSA72300","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36846"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","provider":"juniper","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"solutions":"The following software releases have been updated to resolve this specific issue: \n\n20.4R3-S8, 21.2R3-S6, 21.3R3-S5*, 21.4R3-S5*, 22.1R3-S3, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3*, 23.2R1, and all subsequent releases.\n*Pending Publication","state":"PUBLISHED","title":"Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files","updated_at":1794500401,"workarounds":"Disable J-Web, or limit access to only trusted hosts."},"sources":[]}