{"cve_id":"CVE-2023-36846","published":"2023-08-17T20:15:10.457000+00:00","last_modified":"2026-06-17T06:07:12.957000+00:00","vuln_status":"Analyzed","description":"A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.\n\n\n\nWith a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of \n\nintegrity\n\nfor a certain \n\npart of the file system, which may allow chaining to other vulnerabilities.\n\n\nThis issue affects Juniper Networks Junos OS on SRX Series:\n\n\n\n  *  All versions prior to 20.4R3-S8;\n  *  21.1 versions 21.1R1 and later;\n  *  21.2 versions prior to 21.2R3-S6;\n  *  21.3 versions \n\nprior to \n\n 21.3R3-S5;\n  *  21.4 versions \n\nprior to \n\n21.4R3-S5;\n  *  22.1 versions \n\nprior to \n\n22.1R3-S3;\n  *  22.2 versions \n\nprior to \n\n22.2R3-S2;\n  *  22.3 versions \n\nprior to \n\n22.3R2-S2, 22.3R3;\n  *  22.4 versions \n\nprior to \n\n22.4R2-S1, 22.4R3.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","base_score":5.3,"base_severity":"MEDIUM","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"NONE","impact_i":"LOW","impact_a":"NONE","cwe_ids":["CWE-306"],"in_kev":true,"kev_date_added":"2023-11-13","kev_ransomware":false,"epss_score":0.93473,"epss_percentile":0.99839,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"USER","caps":["AUTH_BYPASS","TAMPER"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T10:36:02.794852+00:00","first_seen":"2023-08-17T20:15:10.457000+00:00","kev_first_seen":"2023-11-13T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["juniper"],"products":["junos","srx100","srx110","srx1400","srx1500","srx210","srx220","srx240","srx240h2","srx240m","srx300","srx320","srx340","srx3400","srx345","srx3600","srx380","srx4000","srx4100","srx4200","srx4600","srx5000","srx5400","srx550","srx550_hm","srx550m","srx5600","srx5800","srx650"],"affected":[{"vendor":"juniper","product":"junos","ranges":["< 20.4","20.4","21.1","21.2","21.3","21.4","22.1","22.2","22.3","22.4"]}]}