CVE-2023-36845 Juniper Junos OS
Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution…
- CVSS
- not scored
On CISA’s exploited list
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
- Added
- 2023-11-13
- Federal patch deadline
- 2023-11-17
- Ransomware use
- not known