CVE-2023-36851
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of integrity or confidentiality, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * 21.2 versions prior to 21.2R3-S8; * 21.4 versions prior to 21.4R3-S6; * 22.1 versions prior to 22.1R3-S5; * 22.2 versions prior to 22.2R3-S3; * 22.3 versions prior to 22.3R3-S2; * 22.4 versions prior to 22,4R2-S2, 22.4R3; * 23.2 versions prior to 23.2R1-S2, 23.2R2.
Official description from the CVE record, published by juniper. Copyright © 1999-2026 The MITRE Corporation. See /security/cve/legal for the CVE license. View the record on cve.org
Key data
CVSS 3.1 Medium 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector: Network
The vulnerable component can be reached over a network, possibly from the Internet.
Attack complexity: Low
No special conditions are needed. The attack can be repeated at will.
Privileges required: None
No account or privileges are needed.
User interaction: None
No action from any user is needed.
Scope: Unchanged
The impact stays within the vulnerable component.
Confidentiality impact: None
No effect on the secrecy of data.
Integrity impact: Low
Limited effect on the trustworthiness of data.
Availability impact: None
No effect on availability.
| Metric | Value | What it means |
|---|---|---|
| Attack vector | Network | The vulnerable component can be reached over a network, possibly from the Internet. |
| Attack complexity | Low | No special conditions are needed. The attack can be repeated at will. |
| Privileges required | None | No account or privileges are needed. |
| User interaction | None | No action from any user is needed. |
| Scope | Unchanged | The impact stays within the vulnerable component. |
| Confidentiality impact | None | No effect on the secrecy of data. |
| Integrity impact | Low | Limited effect on the trustworthiness of data. |
| Availability impact | None | No effect on availability. |
CVSS is owned and managed by FIRST.Org, Inc. (FIRST) and is used by permission. Each CVSS score on this site is shown together with its vector string, as published in the CVE record by the source named next to it. Learn more at first.org/cvss.
EPSS
- Score
- 0.01123 (1.1% probability)
- Percentile
- 66.5%
- Scores of
- Nov 10, 2026
- Model
- v2026.06.15
CISA Known Exploited Vulnerabilities
- Name in the catalog
- Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- Added to the catalog
- Nov 13, 2023
- Federal due date
- Nov 17, 2023
CISA assessment as of Nov 15, 2023
- Exploitation
- Recorded by CISA as active
- Automatable
- yes
- Technical impact
- total
Weakness (CWE)
- CWE-306Missing Authentication for Critical Functionality
Affected products
Juniper Networks Junos OS
- affected: 21.2 up to before 21.2R3-S8
- affected: 21.4 up to before 21.4R3-S6
- affected: 22.1 up to before 22.1R3-S5
- affected: 22.2 up to before 22.2R3-S3
- affected: 22.3 up to before 22.3R3-S2
- affected: 22.4 up to before 22.4R2-S2, 22.4R3
- affected: 23.2 up to before 23.2R1-S2, 23.2R2
References
- supportportal.juniper.net/JSA72300vendor-advisorymitigation
Timeline
- ID reserved
- Record published
- Added to CISA KEV
- Record last updated
Look up another CVE
About CubePath
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Data as of Nov 10, 2026, 19:24 UTC. Sources and licenses