Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-36851 Details

Description

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of integrity or confidentiality, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * 21.2 versions prior to 21.2R3-S8; * 21.4 versions prior to 21.4R3-S6; * 22.1 versions prior to 22.1R3-S5; * 22.2 versions prior to 22.2R3-S3; * 22.3 versions prior to 22.3R3-S2; * 22.4 versions prior to 22,4R2-S2, 22.4R3; * 23.2 versions prior to 23.2R1-S2, 23.2R2.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CNA: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36851	CISA-ADP	US Government Resource
https://supportportal.juniper.net/JSA72300	CVE	Vendor Advisory
https://supportportal.juniper.net/JSA72300	[email protected]	Vendor Advisory

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability	Nov 13, 2023	Nov 17, 2023	Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-306	Missing Authentication for Critical Function	[email protected]
CWE-306	Missing Authentication for Critical Function	[email protected]

Affected Products

Product	Versions
juniper junos	21.2 - 21.2 r1 21.2 r1-s1 21.2 r1-s2 21.2 r2
CPE cpe:2.3:o:juniper:junos:21.2:-:::::: cpe:2.3:o:juniper:junos:21.2:r1:::::: cpe:2.3:o:juniper:junos:21.2:r1-s1:::::: cpe:2.3:o:juniper:junos:21.2:r1-s2:::::: cpe:2.3:o:juniper:junos:21.2:r2:::::: cpe:2.3:o:juniper:junos:21.2:r2-s1:::::: cpe:2.3:o:juniper:junos:21.2:r2-s2:::::: cpe:2.3:o:juniper:junos:21.2:r3:::::: cpe:2.3:o:juniper:junos:21.2:r3-s1:::::: cpe:2.3:o:juniper:junos:21.2:r3-s2:::::: cpe:2.3:o:juniper:junos:21.2:r3-s3:::::: cpe:2.3:o:juniper:junos:21.2:r3-s4:::::: cpe:2.3:o:juniper:junos:21.2:r3-s5:::::: cpe:2.3:o:juniper:junos:21.2:r3-s6:::::: cpe:2.3:o:juniper:junos:21.2:r3-s7:::::: cpe:2.3:o:juniper:junos:21.4:-:::::: cpe:2.3:o:juniper:junos:21.4:r1:::::: cpe:2.3:o:juniper:junos:21.4:r1-s1:::::: cpe:2.3:o:juniper:junos:21.4:r1-s2:::::: cpe:2.3:o:juniper:junos:21.4:r2:::::: cpe:2.3:o:juniper:junos:21.4:r2-s1:::::: cpe:2.3:o:juniper:junos:21.4:r2-s2:::::: cpe:2.3:o:juniper:junos:21.4:r3:::::: cpe:2.3:o:juniper:junos:21.4:r3-s1:::::: cpe:2.3:o:juniper:junos:21.4:r3-s2:::::: cpe:2.3:o:juniper:junos:21.4:r3-s3:::::: cpe:2.3:o:juniper:junos:21.4:r3-s4:::::: cpe:2.3:o:juniper:junos:21.4:r3-s5:::::: cpe:2.3:o:juniper:junos:22.1:r1:::::: cpe:2.3:o:juniper:junos:22.1:r1-s1:::::: cpe:2.3:o:juniper:junos:22.1:r1-s2:::::: cpe:2.3:o:juniper:junos:22.1:r2:::::: cpe:2.3:o:juniper:junos:22.1:r2-s1:::::: cpe:2.3:o:juniper:junos:22.1:r2-s2:::::: cpe:2.3:o:juniper:junos:22.1:r3:::::: cpe:2.3:o:juniper:junos:22.1:r3-s1:::::: cpe:2.3:o:juniper:junos:22.1:r3-s2:::::: cpe:2.3:o:juniper:junos:22.1:r3-s3:::::: cpe:2.3:o:juniper:junos:22.1:r3-s4:::::: cpe:2.3:o:juniper:junos:22.2:r1:::::: cpe:2.3:o:juniper:junos:22.2:r1-s1:::::: cpe:2.3:o:juniper:junos:22.2:r1-s2:::::: cpe:2.3:o:juniper:junos:22.2:r2:::::: cpe:2.3:o:juniper:junos:22.2:r2-s1:::::: cpe:2.3:o:juniper:junos:22.2:r2-s2:::::: cpe:2.3:o:juniper:junos:22.2:r3:::::: cpe:2.3:o:juniper:junos:22.2:r3-s1:::::: cpe:2.3:o:juniper:junos:22.2:r3-s2:::::: cpe:2.3:o:juniper:junos:22.3:r1:::::: cpe:2.3:o:juniper:junos:22.3:r1-s1:::::: cpe:2.3:o:juniper:junos:22.3:r1-s2:::::: cpe:2.3:o:juniper:junos:22.3:r2:::::: cpe:2.3:o:juniper:junos:22.3:r2-s1:::::: cpe:2.3:o:juniper:junos:22.3:r3:::::: cpe:2.3:o:juniper:junos:22.3:r3-s1:::::: cpe:2.3:o:juniper:junos:22.4:r1:::::: cpe:2.3:o:juniper:junos:22.4:r1-s1:::::: cpe:2.3:o:juniper:junos:22.4:r1-s2:::::: cpe:2.3:o:juniper:junos:22.4:r2:::::: cpe:2.3:o:juniper:junos:22.4:r2-s1:::::: cpe:2.3:o:juniper:junos:23.2:r1:::::: cpe:2.3:o:juniper:junos:23.2:r1-s1:::::: Remediation No remediation found in references.
juniper ex2200	All versions
CPE cpe:2.3:h:juniper:ex2200:-:::::::* Remediation No remediation found in references.
juniper ex2200-c	All versions
CPE cpe:2.3:h:juniper:ex2200-c:-:::::::* Remediation No remediation found in references.
juniper ex2200-vc	All versions
CPE cpe:2.3:h:juniper:ex2200-vc:-:::::::* Remediation No remediation found in references.
juniper ex2300	All versions
CPE cpe:2.3:h:juniper:ex2300:-:::::::* Remediation No remediation found in references.
juniper ex2300-24mp	All versions
CPE cpe:2.3:h:juniper:ex2300-24mp:-:::::::* Remediation No remediation found in references.
juniper ex2300-24p	All versions
CPE cpe:2.3:h:juniper:ex2300-24p:-:::::::* Remediation No remediation found in references.
juniper ex2300-24t	All versions
CPE cpe:2.3:h:juniper:ex2300-24t:-:::::::* Remediation No remediation found in references.
juniper ex2300-48mp	All versions
CPE cpe:2.3:h:juniper:ex2300-48mp:-:::::::* Remediation No remediation found in references.
juniper ex2300-48p	All versions
CPE cpe:2.3:h:juniper:ex2300-48p:-:::::::* Remediation No remediation found in references.
juniper ex2300-48t	All versions
CPE cpe:2.3:h:juniper:ex2300-48t:-:::::::* Remediation No remediation found in references.
juniper ex2300-c	All versions
CPE cpe:2.3:h:juniper:ex2300-c:-:::::::* Remediation No remediation found in references.
juniper ex2300m	All versions
CPE cpe:2.3:h:juniper:ex2300m:-:::::::* Remediation No remediation found in references.
juniper ex3200	All versions
CPE cpe:2.3:h:juniper:ex3200:-:::::::* Remediation No remediation found in references.
juniper ex3300	All versions
CPE cpe:2.3:h:juniper:ex3300:-:::::::* Remediation No remediation found in references.
juniper ex3300-vc	All versions
CPE cpe:2.3:h:juniper:ex3300-vc:-:::::::* Remediation No remediation found in references.
juniper ex3400	All versions
CPE cpe:2.3:h:juniper:ex3400:-:::::::* Remediation No remediation found in references.
juniper ex4200	All versions
CPE cpe:2.3:h:juniper:ex4200:-:::::::* Remediation No remediation found in references.
juniper ex4200-vc	All versions
CPE cpe:2.3:h:juniper:ex4200-vc:-:::::::* Remediation No remediation found in references.
juniper ex4300	All versions
CPE cpe:2.3:h:juniper:ex4300:-:::::::* Remediation No remediation found in references.
juniper ex4300-24p	All versions
CPE cpe:2.3:h:juniper:ex4300-24p:-:::::::* Remediation No remediation found in references.
juniper ex4300-24p-s	All versions
CPE cpe:2.3:h:juniper:ex4300-24p-s:-:::::::* Remediation No remediation found in references.
juniper ex4300-24t	All versions
CPE cpe:2.3:h:juniper:ex4300-24t:-:::::::* Remediation No remediation found in references.
juniper ex4300-24t-s	All versions
CPE cpe:2.3:h:juniper:ex4300-24t-s:-:::::::* Remediation No remediation found in references.
juniper ex4300-32f	All versions
CPE cpe:2.3:h:juniper:ex4300-32f:-:::::::* Remediation No remediation found in references.
juniper ex4300-32f-dc	All versions
CPE cpe:2.3:h:juniper:ex4300-32f-dc:-:::::::* Remediation No remediation found in references.
juniper ex4300-32f-s	All versions
CPE cpe:2.3:h:juniper:ex4300-32f-s:-:::::::* Remediation No remediation found in references.
juniper ex4300-48mp	All versions
CPE cpe:2.3:h:juniper:ex4300-48mp:-:::::::* Remediation No remediation found in references.
juniper ex4300-48mp-s	All versions
CPE cpe:2.3:h:juniper:ex4300-48mp-s:-:::::::* Remediation No remediation found in references.
juniper ex4300-48p	All versions
CPE cpe:2.3:h:juniper:ex4300-48p:-:::::::* Remediation No remediation found in references.
juniper ex4300-48p-s	All versions
CPE cpe:2.3:h:juniper:ex4300-48p-s:-:::::::* Remediation No remediation found in references.
juniper ex4300-48t	All versions
CPE cpe:2.3:h:juniper:ex4300-48t:-:::::::* Remediation No remediation found in references.
juniper ex4300-48t-afi	All versions
CPE cpe:2.3:h:juniper:ex4300-48t-afi:-:::::::* Remediation No remediation found in references.
juniper ex4300-48t-dc	All versions
CPE cpe:2.3:h:juniper:ex4300-48t-dc:-:::::::* Remediation No remediation found in references.
juniper ex4300-48t-dc-afi	All versions
CPE cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:::::::* Remediation No remediation found in references.
juniper ex4300-48t-s	All versions
CPE cpe:2.3:h:juniper:ex4300-48t-s:-:::::::* Remediation No remediation found in references.
juniper ex4300-48tafi	All versions
CPE cpe:2.3:h:juniper:ex4300-48tafi:-:::::::* Remediation No remediation found in references.
juniper ex4300-48tdc	All versions
CPE cpe:2.3:h:juniper:ex4300-48tdc:-:::::::* Remediation No remediation found in references.
juniper ex4300-48tdc-afi	All versions
CPE cpe:2.3:h:juniper:ex4300-48tdc-afi:-:::::::* Remediation No remediation found in references.
juniper ex4300-mp	All versions
CPE cpe:2.3:h:juniper:ex4300-mp:-:::::::* Remediation No remediation found in references.
juniper ex4300-vc	All versions
CPE cpe:2.3:h:juniper:ex4300-vc:-:::::::* Remediation No remediation found in references.
juniper ex4300m	All versions
CPE cpe:2.3:h:juniper:ex4300m:-:::::::* Remediation No remediation found in references.
juniper ex4400	All versions
CPE cpe:2.3:h:juniper:ex4400:-:::::::* Remediation No remediation found in references.
juniper ex4500	All versions
CPE cpe:2.3:h:juniper:ex4500:-:::::::* Remediation No remediation found in references.
juniper ex4500-vc	All versions
CPE cpe:2.3:h:juniper:ex4500-vc:-:::::::* Remediation No remediation found in references.
juniper ex4550	All versions
CPE cpe:2.3:h:juniper:ex4550:-:::::::* Remediation No remediation found in references.
juniper ex4550-vc	All versions
CPE cpe:2.3:h:juniper:ex4550-vc:-:::::::* Remediation No remediation found in references.
juniper ex4550/vc	All versions
CPE cpe:2.3:h:juniper:ex4550/vc:-:::::::* Remediation No remediation found in references.
juniper ex4600	All versions
CPE cpe:2.3:h:juniper:ex4600:-:::::::* Remediation No remediation found in references.
juniper ex4600-vc	All versions
CPE cpe:2.3:h:juniper:ex4600-vc:-:::::::* Remediation No remediation found in references.
juniper ex4650	All versions
CPE cpe:2.3:h:juniper:ex4650:-:::::::* Remediation No remediation found in references.
juniper ex6200	All versions
CPE cpe:2.3:h:juniper:ex6200:-:::::::* Remediation No remediation found in references.
juniper ex6210	All versions
CPE cpe:2.3:h:juniper:ex6210:-:::::::* Remediation No remediation found in references.
juniper ex8200	All versions
CPE cpe:2.3:h:juniper:ex8200:-:::::::* Remediation No remediation found in references.
juniper ex8200-vc	All versions
CPE cpe:2.3:h:juniper:ex8200-vc:-:::::::* Remediation No remediation found in references.
juniper ex8208	All versions
CPE cpe:2.3:h:juniper:ex8208:-:::::::* Remediation No remediation found in references.
juniper ex8216	All versions
CPE cpe:2.3:h:juniper:ex8216:-:::::::* Remediation No remediation found in references.
juniper ex9200	All versions
CPE cpe:2.3:h:juniper:ex9200:-:::::::* Remediation No remediation found in references.
juniper ex9204	All versions
CPE cpe:2.3:h:juniper:ex9204:-:::::::* Remediation No remediation found in references.
juniper ex9208	All versions
CPE cpe:2.3:h:juniper:ex9208:-:::::::* Remediation No remediation found in references.
juniper ex9214	All versions
CPE cpe:2.3:h:juniper:ex9214:-:::::::* Remediation No remediation found in references.
juniper ex9250	All versions
CPE cpe:2.3:h:juniper:ex9250:-:::::::* Remediation No remediation found in references.
juniper ex9251	All versions
CPE cpe:2.3:h:juniper:ex9251:-:::::::* Remediation No remediation found in references.
juniper ex9253	All versions
CPE cpe:2.3:h:juniper:ex9253:-:::::::* Remediation No remediation found in references.
juniper srx100	All versions
CPE cpe:2.3:h:juniper:srx100:-:::::::* Remediation No remediation found in references.
juniper srx110	All versions
CPE cpe:2.3:h:juniper:srx110:-:::::::* Remediation No remediation found in references.
juniper srx1400	All versions
CPE cpe:2.3:h:juniper:srx1400:-:::::::* Remediation No remediation found in references.
juniper srx1500	All versions
CPE cpe:2.3:h:juniper:srx1500:-:::::::* Remediation No remediation found in references.
juniper srx210	All versions
CPE cpe:2.3:h:juniper:srx210:-:::::::* Remediation No remediation found in references.
juniper srx220	All versions
CPE cpe:2.3:h:juniper:srx220:-:::::::* Remediation No remediation found in references.
juniper srx240	All versions
CPE cpe:2.3:h:juniper:srx240:-:::::::* Remediation No remediation found in references.
juniper srx240h2	All versions
CPE cpe:2.3:h:juniper:srx240h2:-:::::::* Remediation No remediation found in references.
juniper srx240m	All versions
CPE cpe:2.3:h:juniper:srx240m:-:::::::* Remediation No remediation found in references.
juniper srx300	All versions
CPE cpe:2.3:h:juniper:srx300:-:::::::* Remediation No remediation found in references.
juniper srx320	All versions
CPE cpe:2.3:h:juniper:srx320:-:::::::* Remediation No remediation found in references.
juniper srx340	All versions
CPE cpe:2.3:h:juniper:srx340:-:::::::* Remediation No remediation found in references.
juniper srx3400	All versions
CPE cpe:2.3:h:juniper:srx3400:-:::::::* Remediation No remediation found in references.
juniper srx345	All versions
CPE cpe:2.3:h:juniper:srx345:-:::::::* Remediation No remediation found in references.
juniper srx3600	All versions
CPE cpe:2.3:h:juniper:srx3600:-:::::::* Remediation No remediation found in references.
juniper srx380	All versions
CPE cpe:2.3:h:juniper:srx380:-:::::::* Remediation No remediation found in references.
juniper srx4000	All versions
CPE cpe:2.3:h:juniper:srx4000:-:::::::* Remediation No remediation found in references.
juniper srx4100	All versions
CPE cpe:2.3:h:juniper:srx4100:-:::::::* Remediation No remediation found in references.
juniper srx4200	All versions
CPE cpe:2.3:h:juniper:srx4200:-:::::::* Remediation No remediation found in references.
juniper srx4600	All versions
CPE cpe:2.3:h:juniper:srx4600:-:::::::* Remediation No remediation found in references.
juniper srx5000	All versions
CPE cpe:2.3:h:juniper:srx5000:-:::::::* Remediation No remediation found in references.
juniper srx5400	All versions
CPE cpe:2.3:h:juniper:srx5400:-:::::::* Remediation No remediation found in references.
juniper srx550	All versions
CPE cpe:2.3:h:juniper:srx550:-:::::::* Remediation No remediation found in references.
juniper srx550 hm	All versions
CPE cpe:2.3:h:juniper:srx550_hm:-:::::::* Remediation No remediation found in references.
juniper srx550m	All versions
CPE cpe:2.3:h:juniper:srx550m:-:::::::* Remediation No remediation found in references.
juniper srx5600	All versions
CPE cpe:2.3:h:juniper:srx5600:-:::::::* Remediation No remediation found in references.
juniper srx5800	All versions
CPE cpe:2.3:h:juniper:srx5800:-:::::::* Remediation No remediation found in references.
juniper srx650	All versions
CPE cpe:2.3:h:juniper:srx650:-:::::::* Remediation No remediation found in references.

Change History

14 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Feb 26, 2026	Modified Analysis	[email protected]
Feb 25, 2026	CVE Modified	[email protected]
Oct 24, 2025	Modified Analysis	[email protected]
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Jan 27, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Jun 26, 2024	Modified Analysis	[email protected]
May 14, 2024	CVE Modified	[email protected]
Jan 25, 2024	CVE Modified	[email protected]
Sep 28, 2023	Initial Analysis	[email protected]

CVE-2023-36851 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE