Critical Unauthenticated File Upload Vulnerability (CVE‑2023‑36846) in Juniper Junos OS SRX Series
What It Is – Juniper Junos OS on SRX Series devices contains a missing authentication check for a critical J‑Web function. An unauthenticated, network‑based attacker can send a crafted request to user.php and upload arbitrary files to the appliance’s file system.
Exploitability – The flaw is publicly disclosed (CVE‑2023‑36846) and a proof‑of‑concept request is available. No public exploit kit has been observed, but the attack requires only network reach to the J‑Web interface. CVSS v3.1 base score ≈ 7.5 (High).
Affected Products – Juniper Junos OS running on SRX Series firewalls (all supported releases prior to the vendor‑issued patch).
Why It Matters for Trust & Control Assurance
- Demonstrates the need for continuous configuration‑control monitoring; evidence that authentication controls are enforced must be captured and auditable.
- Highlights the importance of a defensible patch‑management process—remediation evidence feeds directly into compliance audits.
- Shows how a single missing control can cascade into broader risk, making third‑party risk assessments and control‑mapping essential for enterprise buyers.
Recommended Actions
- Apply Juniper’s security advisory patch for CVE‑2023‑36846 immediately.
- Verify that J‑Web access is restricted to authorized administrators (e.g., IP‑based ACLs, MFA).
- Update your configuration‑management and change‑control procedures to record the remediation step as evidence.
- Conduct a post‑remediation scan to confirm the vulnerability is closed and log the results for audit purposes.
Source: CISA KEV – CVE‑2023‑36846