CVE-2023-36845

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.951 · 100 %ileexploit · weaponizedDEEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 16 exploits · weaponized

Likely / severe?

95.1% (100th) EPSS

CVSS 5.3 · medium

Is it mine?

36 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

added 2023-11-13remediate by 2023-11-17

required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-27

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code. This issue affects Juniper Networks Junos OS on EX Series and SRX Series: * All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.3–9.8

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · sirt@juniper.net USexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-473USCWE-473US

ATT&CK techniques

ATT&CK techniques this enables or maps to.

exploits (16)

Public proof-of-concept and weaponised exploit code.

affected products (36)

Products and version ranges known to be affected.

Juniper EX Seriesall versionscert_bundDEcpe:/h:juniper:ex:-
Juniper SRX Seriesall versionscert_bundDEcpe:/h:juniper:srx_service_gateways:-
Juniper Networks Junos OS0 → 20.4R3-S9enisa_euvdEU
Juniper Networks Junos OS21.1 → 21.1*enisa_euvdEU
Juniper Networks Junos OS21.2 → 21.2R3-S7enisa_euvdEU
Juniper Networks Junos OS21.3 → 21.3R3-S5enisa_euvdEU
Juniper Networks Junos OS21.4 → 21.4R3-S5enisa_euvdEU
Juniper Networks Junos OS22.1 → 22.1R3-S4enisa_euvdEU
Juniper Networks Junos OS22.2 → 22.2R3-S2enisa_euvdEU
Juniper Networks Junos OS22.3 → 22.3R2-S2, 22.3R3-S1enisa_euvdEU
Juniper Networks Junos OS22.4 → 22.4R2-S1, 22.4R3enisa_euvdEU
Juniper Networks Junos OS23,2 → 23.2R1-S1, 23.2R2enisa_euvdEU
Juniper Networks Inc. JunOS≤ 20.4R3-S8fstec_bduRU
Juniper Networks Inc. JunOS20.4 → 20.4R3-S5fstec_bduRU
Juniper Networks Inc. JunOS21.1 → 21.1R1fstec_bduRU
Juniper Networks Inc. JunOS21.2 → 21.2R3-S6fstec_bduRU
Juniper Networks Inc. JunOS21.3 → 21.3R3-S5fstec_bduRU
Juniper Networks Inc. JunOS21.4 → 21.4R3-S4fstec_bduRU
Juniper Networks Inc. JunOS22.1 → 22.1R3-S3fstec_bduRU
Juniper Networks Inc. JunOS22.2 → 22.2R3-S1fstec_bduRU

showing 20 of 36

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-2092Juniper JUNOS: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2023-08-17csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Juniper JUNOS auf Geräten der EX- und SRX Serie ausnutzen, um beliebigen Programmcode auszuführen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2023-08-17modified 2026-06-17

references (15)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan