coldbraid

CVE-2023-36845 Juniper Junos OS

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution…

CVSS
not scored

CWE-473

On CISA’s exploited list

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Added
2023-11-13
Federal patch deadline
2023-11-17
Ransomware use
not known