References https://nvd.nist.gov/vuln/detail/CVE-2023-36844 https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/ https://github.com/watchtowrlabs/juniper-rce_cve-2023-36844 https://zhuanlan.zhihu.com/p/653120783 https://www.venustech.com.cn/new_type/aqtg/20230829/26159.html https://attackerkb.com/topics/1PKX0CCXkX/cve-2023-36844 https://www.helpnetsecurity.com/2023/08/22/juniper-firewalls-switches-rce/ https://socprime.com/blog/junos-os-vulnerabilities-exploit-detection-hackers-leverage-cve-2023-36844-rce-bug-chain-abusing-juniper-devices-after-poc-release/ https://www.rapid7.com/blog/post/2023/08/31/etr-exploitation-of-juniper-networks-srx-series-and-ex-series-devices/
Related VulnerabilitiesPalo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞(CVE-2026-0257)Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞(CVE-2025-0107)Cambium Networks Canopy /login.cgi 默认口令漏洞(CVE-2025-4617)Palo Alto Networks Prisma Browser截图控制绕过漏洞(CVE-2025-4618)Palo Alto Networks Prisma Browser敏感信息泄露漏洞ZYCOO CooVox Series IP Phone System /login 默认口令漏洞Fujitsu IP Series 权限绕过漏洞(CVE-2023-38433)CVE-2023-20888: VMware Aria Operations for Networks - Remote Code ExecutionPoCCVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site ScriptingPoCCVE-2018-12675: SV3C HD Camera L Series - Open RedirectPoCCVE-2019-1943: Cisco Small Business 200,300 and 500 Series Switches - Open Redirect