CVE-2023-36851 Juniper Junos OS
Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to…
- CVSS
- not scored
On CISA’s exploited list
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- Added
- 2023-11-13
- Federal patch deadline
- 2023-11-17
- Ransomware use
- not known