CVE-2023-36847

Name: CVE-2023-36847
Creator: NVD / NIST
Published: 2023-08-17T20:15:10.553+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.3/10Actively ExploitedEPSS 84.69%

Last modified Jun 17, 2026

CVE-2023-36847 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S8; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S1; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3.. CISA has confirmed active exploitation in the wild. EPSS estimates a 84.69% chance of exploitation in the next 30 days.

Description

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S8; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S1; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3.

Metrics

CVSS 3.1

5.3/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Probability

84.69%

99.7th percentile

Probability of exploitation in the next 30 days. Learn more

Exploitation Status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by Nov 17, 2023.

Weakness Enumeration

Affected Software

Vendor	Product	Versions	Update
Juniper	Junos	< 20.4	—
Juniper	Junos	20.4	—
Juniper	Junos	21.1	R1
Juniper	Junos	21.2	—
Juniper	Junos	21.3	—
Juniper	Junos	21.4	—
Juniper	Junos	22.1	—
Juniper	Junos	22.2	—
Juniper	Junos	22.3	—
Juniper	Junos	22.4	—

References

https://supportportal.juniper.net/JSA72300Vendor Advisory
https://supportportal.juniper.net/JSA72300Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36847US Government Resource

Timeline

Published: Aug 17, 2023
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2023-36847?

How severe is CVE-2023-36847?

CVE-2023-36847 has a CVSS score of 5.3/10 (MEDIUM severity). The EPSS model estimates a 84.69% probability of exploitation in the next 30 days. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog.

How do I fix CVE-2023-36847?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-36847?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST