CVE-2023-36847
Description
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
With a specific request to installAppPackage.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of
integrity
for a certain
part of the file system, which may allow chaining to other vulnerabilities.
This issue affects Juniper Networks Junos OS on EX Series:
* All versions prior to 20.4R3-S8;
* 21.1 versions 21.1R1 and later;
* 21.2 versions prior to 21.2R3-S6;
* 21.3 versions
prior to
21.3R3-S5;
* 21.4 versions
prior to
21.4R3-S4;
* 22.1 versions
prior to
22.1R3-S3;
* 22.2 versions
prior to
22.2R3-S1;
* 22.3 versions
prior to
22.3R2-S2, 22.3R3;
* 22.4 versions
prior to
22.4R2-S1, 22.4R3.
EPSS (Exploit Prediction Scoring System)
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score Trend (Last 90 Days)
Missing Authentication for Critical Function
DraftCommon Consequences
Applicable Platforms
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.3:-:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*
Junos by Juniper
cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*