{"id":53730,"date":"2023-09-18T22:41:49","date_gmt":"2023-09-18T22:41:49","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/thousands-of-juniper-junos-firewalls-still-open-to-hijacks-exploit-code-available-to-all\/"},"modified":"2023-09-18T22:41:49","modified_gmt":"2023-09-18T22:41:49","slug":"thousands-of-juniper-junos-firewalls-still-open-to-hijacks-exploit-code-available-to-all","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/thousands-of-juniper-junos-firewalls-still-open-to-hijacks-exploit-code-available-to-all\/","title":{"rendered":"Thousands of Juniper Junos firewalls still open to hijacks, exploit code available to all"},"content":{"rendered":"

About 79 percent of public-facing Juniper SRX firewalls remain vulnerable to a single security flaw can allow an unauthenticated attacker to remotely execute code on the devices, according to threat intelligence platform provider VulnCheck.<\/p>\n

Juniper revealed and addressed five flaws, which affect all versions of Junos OS on SRX firewalls and EX Series switches, in an out-of-cycle security bulletin on August 17. The networking and security company updated<\/a> the advisory on September 7, after security researchers published a proof-of-concept (PoC) exploit, and Juniper detected exploit attempts.<\/p>\n

Two of the flaws are PHP external variable modification vulnerabilities (CVE-2023-36844 and CVE-2023-36845). The other three are described as \u201cMissing Authentication for Critical Function vulnerability\u201d (CVE-2023-36846, CVE-2023-36847, and CVE-2023-36851).<\/p>\n

\n

We achieved unauthenticated and remote code execution without dropping a file on disk<\/p>\n<\/blockquote>\n

It’s unclear why Juniper chose to enumerate five CVEs instead of two. The org\u2019s descriptions for the two PHP external variable modification bugs are identical, as are the trio of missing authentication for critical function vulnerabilities.<\/p>\n

The bugs are all rated 5.3 on the ten\u2014point CVSS severity rating scale. But because they can be combined to achieve remote code execution (RCE) the series of security flaws together earned a critical 9.8 CVSS score.<\/p>\n