CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: yes — in CISA KEV since 2023-11-13
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-09-27 · updated 2026-06-17
Weakness: CWE-306

Description

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of integrity or confidentiality, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * 21.2 versions prior to 21.2R3-S8; * 21.4 versions prior to 21.4R3-S6; * 22.1 versions prior to 22.1R3-S5; * 22.2 versions prior to 22.2R3-S3; * 22.3 versions prior to 22.3R3-S2; * 22.4 versions prior to 22,4R2-S2, 22.4R3; * 23.2 versions prior to 23.2R1-S2, 23.2R2.

Summary

CVE-2023-36851 is a missing authentication flaw in Juniper Junos OS on SRX Series devices, where an unauthenticated request to webauth_operation.php via J-Web allows arbitrary file upload and download, compromising integrity and confidentiality and potentially enabling chaining to other attacks. It affects Junos OS 21.2 before 21.2R3-S8, 21.4 before 21.4R3-S6, 22.1 before 22.1R3-S5, 22.2 before 22.2R3-S3, 22.3 before 22.3R3-S2, 22.4 before 22.4R2-S2 and 22.4R3, and 23.2 before 23.2R1-S2 and 23.2R2. The flaw is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation, so apply the vendor's fixed releases or prescribed mitigations immediately, or discontinue use if no mitigation is available.

CVE-2023-36851 هو ثغرة انعدام مصادقة في Juniper Junos OS على أجهزة SRX Series، إذ يسمح طلب غير موثّق إلى webauth_operation.php عبر J-Web برفع وتنزيل ملفات عشوائية، مما يضر بسلامة الملفات وسريتها وقد يمهّد لاستغلال ثغرات أخرى. تتأثر الإصدارات 21.2 قبل 21.2R3-S8، و21.4 قبل 21.4R3-S6، و22.1 قبل 22.1R3-S5، و22.2 قبل 22.2R3-S3، و22.3 قبل 22.3R3-S2، و22.4 قبل 22.4R2-S2 و22.4R3، و23.2 قبل 23.2R1-S2 و23.2R2. الثغرة مدرجة في كتالوج CISA للثغرات المعروفة الاستغلال مع استغلال نشط، لذا يجب تطبيق الإصدارات المصححة أو التخفيفات الموصى بها من المورّد فوراً، أو إيقاف استخدام المنتج إن لم تتوفر معالجة.

Affected products

Juniper Junos OS: 21.2, 21.2-r1, 21.2-r1-s1, 21.2-r1-s2, 21.2-r2, 21.2-r2-s1 (+56)

References

Get alerted when CVE-2023-36851 or the next vulnerability affects your stack