References https://nvd.nist.gov/vuln/detail/CVE-2023-36845 https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution https://vulncheck.com/blog/juniper-cve-2023-36845 https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/ https://github.com/kljunowsky/CVE-2023-36845 https://www.exploit-db.com/exploits/51776 https://blog.csdn.net/m2n3o4p5/article/details/154627637 https://cn-sec.com/archives/2167804.html https://cn-sec.com/archives/2426707.html https://www.ctfiot.com/135609.html
Related VulnerabilitiesPoCCVE-2025-36845: Eveo URVE Web Manager - Server-Side Request ForgeryPoCCVE-2023-36845: Juniper J-Web - Remote Code ExecutionPoCCVE-2022-22242: Juniper Networks Junos OS 错误页面反射 XSS 漏洞PoCthinkphp-lang-rce: thinkphpRcePoCjunos-xss: JunOS - Cross-Site ScriptingJuniper Networks Junos OS和Juniper Networks Junos OS Evolved 信息泄露漏洞Juniper Networks Junos OS SRX 信息泄露漏洞Juniper Networks Junos CVE-2023-36845 远程命令执行漏洞Juniper Networks Junos 远程代码执行漏洞Junos webauth_operation.php 文件上传漏洞(CVE-2023-36844)Junos webauth_operation.php PHPRC 代码执行漏洞(CVE-2023-36845/CVE-2023-36846)