VULNERA Pulse

CVE-2023-34039

CRITICAL CVSS 9.80 EPSS Score 0.12 EPSS Percentile 44.73

Actively Exploited Public Exploits Available

Published: Aug. 29, 2023

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.

Quotes

• A lack of unique cryptographic key generation
• Interestingly, VMware has named this issue ‘Networks Authentication Bypass’, but in my view, nothing is getting bypassed
• Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation
• A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI
• Aria Operations for Networks contains an authentication bypass vulnerability due to a lack of unique cryptographic key generation. VMware has evaluated the severity of this issue to be in the critical severity range with a maximum CVSSv3 base score of 9.8

Headlines

• Sept. 1, 2023 - Exploit released for critical VMware SSH auth bypass vulnerability
• Sept. 1, 2023 - Researcher releases PoC exploit for critical VMware Aria (CVE-2023-34039) bug
• Aug. 31, 2023 - VMware patches Aria SSH bypass bug
• Aug. 30, 2023 - VMware Aria vulnerable to critical SSH authentication bypass flaw
• Aug. 30, 2023 - VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)
• Aug. 30, 2023 - Critical RCE flaw impacts VMware Aria Operations Networks
• Aug. 30, 2023 - Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks
• Aug. 30, 2023 - VMware fixes critical security bugs (CVE-2023-34039 & CVE-2023-20890) in Aria Operations for Networks
• Aug. 29, 2023 - VMware Patches Major Security Flaws in Network Monitoring Product

CVE-2023-2868

CRITICAL CVSS 9.80 EPSS Score 2.77 EPSS Percentile 89.26

CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available

Published: May 24, 2023

A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file (tape archives). The vulnerability stems from incomplete input validation of a user-supplied .tar file as it pertains to the names of the files contained within the archive. As a consequence, a remote attacker can specifically format these file names in a particular manner that will result in remotely executing a system command through Perl's qx operator with the privileges of the Email Security Gateway product. This issue was fixed as part of BNSF-36456 patch. This patch was automatically applied to all customer appliances.

Vendors Impacted: Barracuda Networks, Barracuda

Products Impacted: Email Security Gateway 400, Email Security Gateway 300 Firmware, Email Security Gateway 600 Firmware, Email Security Gateway 900 Firmware, Email Security Gateway 800, Email Security Gateway 300, Email Security Gateway 900, Email Security Gateway 400 Firmware, Email Security Gateway 600, Email Security Gateway 800 Firmware, Email Security Gateway (Esg) Appliance

Quotes

• Highly responsive to defensive efforts
• Mandiant assesses that, at the time of writing, a limited number of previously impacted victims remain at risk due to this campaign
• Notably, among North American identified affected organizations, there were numerous state, provincial, county, tribal, city, and town offices that were targeted in this campaign
• The ability to drop malware [...] which will allow the bad actors to maintain persistence even after the initial entry point is fixed, should be especially worrying for organizations impacted by this or using these appliances
• Since Barracuda released a patch to ESG appliances on May 20, 2023, Mandiant and Barracuda have not identified evidence of successful exploitation of CVE-2023-2868 resulting in any newly compromised physical or virtual ESG appliances
• Through the investigation, Mandiant identified a suspected China-nexus actor, currently tracked as UNC4841, targeting a subset of Barracuda ESG appliances to utilize as a vector for espionage, spanning a multitude of regions and sectors

Headlines

• Aug. 30, 2023 - Almost a third of compromised Barracuda ESGs were govt owned
• Aug. 30, 2023 - Chinese Hackers Target US, Other Govts With Barracuda Flaw
• Aug. 29, 2023 - UNC4841 threat actors hacked US government email servers exploiting Barracuda ESG flaw
• Aug. 29, 2023 - Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom
• Aug. 29, 2023 - Chinese APT Was Prepared for Remediation Efforts in Barracuda ESG Zero-Day Attack
• Aug. 29, 2023 - US govt email servers hacked in Barracuda zero-day attacks
• Aug. 29, 2023 - CISA Releases IOCs Associated with Malicious Barracuda Activity | CISA
• Aug. 27, 2023 - newsletter Round 434 by Pierluigi Paganini

CVE-2023-3519

CRITICAL CVSS 9.80 EPSS Score 91.20 EPSS Percentile 98.48

CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available

Published: July 19, 2023

Unauthenticated remote code execution

Vendor Impacted: Citrix

Products Impacted: Netscaler Application Delivery Contr, Netscaler Gateway, Netscaler Adc And Netscaler Gateway

Quotes

• A code-injection tool to conduct a domain-wide attack
• All this leads us to say it's probable that this is activity from a known threat actor specializing in ransomware attacks
• Our data indicates strong similarity between attacks using CVE-2023-3519 and previous attacks using a number of the same TTPs
• The injected payload for the attack we saw involving Citrix is still under analysis. However, earlier in the summer, we saw activity in a second case that bore a strong resemblance to this case

Headlines

• Aug. 29, 2023 - Unpatched Citrix NetScaler Devices Targeted by Ransomware Group FIN8
• Aug. 29, 2023 - New Ransomware Campaign Targets Citrix NetScaler Flaw
• Aug. 29, 2023 - Ransomware group exploits Citrix NetScaler systems for initial access
• Aug. 29, 2023 - FIN8-linked actor targets Citrix NetScaler systems
• Aug. 29, 2023 - Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical Vulnerability
• Aug. 28, 2023 - Attacks on Citrix NetScaler systems linked to ransomware actor

CVE-2023-33246

CRITICAL CVSS 9.80 EPSS Score 96.39 EPSS Percentile 99.36

Actively Exploited Remote Code Execution Public Exploits Available

Published: May 24, 2023

For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.  Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content.  To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .

Quotes

• As DreamBus malicious threat actors resurface, their primary objective remains the installation of a Monero cryptocurrency miner. However, the presence of a modular bot like the DreamBus malware equipped with the ability to execute bash scripts provides these cybercriminals the potential to diversify their attack repertoire, including the installation of various other forms of malware

Headlines

• Aug. 31, 2023 - Adversaries Ride RocketMQ Bug to DreamBus Bot Resurgence
• Aug. 30, 2023 - Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
• Aug. 30, 2023 - DreamBus Botnet Exploiting RocketMQ Vulnerability to Delivery Cryptocurrency Miner
• Aug. 30, 2023 - RocketMQ Vulnerability Exploited by DreamBus Malware
• Aug. 28, 2023 - DreamBus Botnet Resurfaces, Targets RocketMQ vulnerability | Official Blogs

CVE-2023-20887

CRITICAL CVSS 9.80 EPSS Score 96.07 EPSS Percentile 99.27

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: June 7, 2023

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Vendor Impacted: Vmware

Products Impacted: Aria Operations For Networks, Vrealize Network Insight

Quotes

• A lack of unique cryptographic key generation
• Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation
• A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI

Headlines

• Sept. 1, 2023 - Exploit released for critical VMware SSH auth bypass vulnerability
• Aug. 30, 2023 - VMware Aria vulnerable to critical SSH authentication bypass flaw
• Aug. 30, 2023 - VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)
• Aug. 30, 2023 - Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks

CVE-2023-20890

HIGH CVSS 7.20 EPSS Score 0.09 EPSS Percentile 36.61

Remote Code Execution

Published: Aug. 29, 2023

Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution.

Vendor Impacted: Vmware

Product Impacted: Aria Operations For Networks

Quotes

• A lack of unique cryptographic key generation
• Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation
• A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI
• Aria Operations for Networks contains an authentication bypass vulnerability due to a lack of unique cryptographic key generation. VMware has evaluated the severity of this issue to be in the critical severity range with a maximum CVSSv3 base score of 9.8

Headlines

• Sept. 1, 2023 - Exploit released for critical VMware SSH auth bypass vulnerability
• Aug. 31, 2023 - VMware patches Aria SSH bypass bug
• Aug. 30, 2023 - VMware Aria vulnerable to critical SSH authentication bypass flaw
• Aug. 30, 2023 - VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)
• Aug. 30, 2023 - Critical RCE flaw impacts VMware Aria Operations Networks
• Aug. 30, 2023 - Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks
• Aug. 30, 2023 - VMware fixes critical security bugs (CVE-2023-34039 & CVE-2023-20890) in Aria Operations for Networks
• Aug. 29, 2023 - VMware Patches Major Security Flaws in Network Monitoring Product

CVE-2023-36846

MEDIUM CVSS 5.30 EPSS Score 0.05 EPSS Percentile 13.95

Actively Exploited Remote Code Execution

Published: Aug. 17, 2023

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain  part of the file system, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * All versions prior to 20.4R3-S8; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3.

Vendor Impacted: Juniper

Products Impacted: Srx210, Srx550m, Srx650, Srx4200, Ex4300-24p, Ex2300-24mp, Srx1400, Srx3400, Ex4300-24p-S, Ex4300-48t-Dc-Afi, Ex2300m, Srx340, Ex4650, Srx4100, Ex4300, Ex4300-48t, Ex9214, Srx1500, Ex4300-24t-S, Junos, Ex4300-32f, Ex3200, Ex4300-48tdc, Ex4300m, Ex2300-48p, Ex4300-Mp, Ex4300-48tafi, Ex9253, Srx110, Ex8200, Ex9250, Ex4300-48t-S, Ex4300-48p, Srx4000, Srx4600, Ex9251, Srx300, Ex9200, Ex4300-48p-S, Ex9208, Ex4300-48mp-S, Ex6200, Ex4300-48t-Afi, Ex4300-48tdc-Afi, Ex4300-48t-Dc, Ex4600-Vc, Srx380, Ex4400, Ex9204, Srx5400, Ex3300-Vc, Ex4300-24t, Ex6210, Ex8216, Ex4200, Srx240m, Ex8200-Vc, Ex4550-Vc, Ex8208, Ex4300-32f-S, Ex4300-Vc, Srx240h2, Ex2300-48t, Ex2300, Ex3400, Srx320, Ex4550\/vc, Ex4500, Ex4500-Vc, Srx5600, Ex2200, Ex2300-24p, Ex4550, Srx3600, Srx240, Ex2300-48mp, Srx550, Ex2300-C, Srx100, Ex4300-48mp, Ex4200-Vc, Srx5000, Srx345, Ex4600, Ex2200-Vc, Srx220, Srx5800, Ex3300, Ex4300-32f-Dc, Ex2300-24t, Ex2200-C, Srx550 Hm

Quotes

• Why don’t these developers learn the lesson
• We decided to investigate in order to provide network administrators with more information to aid in the recurring 'patch or no patch' decision, and to aid in patch verification
• A file-signing and verification scheme that protects the Junos operating system (OS) against unauthorized software and activity that might compromise the integrity of your device
• Multiple vulnerabilities in the J-Web component of Juniper Networks Junos OS on SRX Series and EX Series have been resolved through the application of specific fixes to address each vulnerability
• With a specific request that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities

Headlines

• Aug. 30, 2023 - Threat actors started exploiting Juniper flaws shortly after PoC release
• Aug. 30, 2023 - Recent Juniper Flaws Chained in Attacks Following PoC Exploit Publication
• Aug. 30, 2023 - Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
• Aug. 29, 2023 - Hackers exploit critical Juniper RCE bug chain after PoC release
• Aug. 29, 2023 - Researchers demo bug-chaining of Juniper Networks vulnerabilities
• Aug. 28, 2023 - Experts published PoC exploit code for Juniper SRX firewall flaws
• Aug. 28, 2023 - Exploit released for Juniper firewall bugs allowing RCE attacks
• Aug. 28, 2023 - PoC for no-auth RCE on Juniper firewalls released
• Aug. 27, 2023 - Week in review: Security Onion 2.4 released, WinRAR vulnerable to RCE

CVE-2023-36845

MEDIUM CVSS 5.30 EPSS Score 0.05 EPSS Percentile 13.95

Risk Context N/A

Published: Aug. 17, 2023

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain, important environments variables. Utilizing a crafted request an attacker is able to modify a certain PHP environment variable leading to partial loss of integrity, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * All versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.

Vendor Impacted: Juniper

Products Impacted: Srx210, Srx550m, Srx650, Srx4200, Ex4300-24p, Ex2300-24mp, Srx1400, Srx3400, Ex4300-24p-S, Ex4300-48t-Dc-Afi, Ex2300m, Srx340, Ex4650, Srx4100, Ex4300, Ex4300-48t, Ex9214, Srx1500, Ex4300-24t-S, Junos, Ex4300-32f, Ex3200, Ex4300-48tdc, Ex4300m, Ex2300-48p, Ex4300-Mp, Ex4300-48tafi, Ex9253, Srx110, Ex8200, Ex9250, Ex4300-48t-S, Ex4300-48p, Srx4000, Srx4600, Ex9251, Srx300, Ex9200, Ex4300-48p-S, Ex9208, Ex4300-48mp-S, Ex6200, Ex4300-48t-Afi, Ex4300-48tdc-Afi, Ex4300-48t-Dc, Ex4600-Vc, Srx380, Ex4400, Ex9204, Srx5400, Ex3300-Vc, Ex4300-24t, Ex6210, Ex8216, Ex4200, Srx240m, Ex8200-Vc, Ex4550-Vc, Ex8208, Ex4300-32f-S, Ex4300-Vc, Srx240h2, Ex2300-48t, Ex2300, Ex3400, Srx320, Ex4550\/vc, Ex4500, Ex4500-Vc, Srx5600, Ex2200, Ex2300-24p, Ex4550, Srx3600, Srx240, Ex2300-48mp, Srx550, Ex2300-C, Srx100, Ex4300-48mp, Ex4200-Vc, Srx5000, Srx345, Ex4600, Ex2200-Vc, Srx220, Srx5800, Ex3300, Ex4300-32f-Dc, Ex2300-24t, Ex2200-C, Srx550 Hm

Quotes

• Why don’t these developers learn the lesson
• We decided to investigate in order to provide network administrators with more information to aid in the recurring 'patch or no patch' decision, and to aid in patch verification
• Multiple vulnerabilities in the J-Web component of Juniper Networks Junos OS on SRX Series and EX Series have been resolved through the application of specific fixes to address each vulnerability
• With a specific request that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities

Headlines

• Aug. 30, 2023 - Threat actors started exploiting Juniper flaws shortly after PoC release
• Aug. 30, 2023 - Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
• Aug. 29, 2023 - Hackers exploit critical Juniper RCE bug chain after PoC release
• Aug. 29, 2023 - Researchers demo bug-chaining of Juniper Networks vulnerabilities
• Aug. 28, 2023 - Experts published PoC exploit code for Juniper SRX firewall flaws
• Aug. 28, 2023 - Exploit released for Juniper firewall bugs allowing RCE attacks
• Aug. 27, 2023 - Week in review: Security Onion 2.4 released, WinRAR vulnerable to RCE

CVE-2023-36844

MEDIUM CVSS 5.30 EPSS Score 1.68 EPSS Percentile 86.10

Risk Context N/A

Published: Aug. 17, 2023

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environments variables. Utilizing a crafted request an attacker is able to modify certain PHP environments variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S9; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R3-S1; * 22.4 versions prior to 22.4R2-S2, 22.4R3.

Vendor Impacted: Juniper

Products Impacted: Srx210, Srx550m, Srx650, Srx4200, Ex4300-24p, Ex2300-24mp, Srx1400, Srx3400, Ex4300-24p-S, Ex4300-48t-Dc-Afi, Ex2300m, Srx340, Ex4650, Srx4100, Ex4300, Ex4300-48t, Ex9214, Srx1500, Ex4300-24t-S, Junos, Ex4300-32f, Ex3200, Ex4300-48tdc, Ex4300m, Ex2300-48p, Ex4300-Mp, Ex4300-48tafi, Ex9253, Srx110, Ex8200, Ex9250, Ex4300-48t-S, Ex4300-48p, Srx4000, Srx4600, Ex9251, Srx300, Ex9200, Ex4300-48p-S, Ex9208, Ex4300-48mp-S, Ex6200, Ex4300-48t-Afi, Ex4300-48tdc-Afi, Ex4300-48t-Dc, Ex4600-Vc, Srx380, Ex4400, Ex9204, Srx5400, Ex3300-Vc, Ex4300-24t, Ex6210, Ex8216, Ex4200, Srx240m, Ex8200-Vc, Ex4550-Vc, Ex8208, Ex4300-32f-S, Ex4300-Vc, Srx240h2, Ex2300-48t, Ex2300, Ex3400, Srx320, Ex4550\/vc, Ex4500, Ex4500-Vc, Srx5600, Ex2200, Ex2300-24p, Ex4550, Srx3600, Srx240, Ex2300-48mp, Srx550, Ex2300-C, Srx100, Ex4300-48mp, Ex4200-Vc, Srx5000, Srx345, Ex4600, Ex2200-Vc, Srx220, Srx5800, Ex3300, Ex4300-32f-Dc, Ex2300-24t, Ex2200-C, Srx550 Hm

Quotes

• Why don’t these developers learn the lesson
• Seeing exploitation attempts from multiple IPs for Juniper J-Web CVE-2023-36844 (& friends) targeting /webauth_operation.php endpoint
• Multiple vulnerabilities in the J-Web component of Juniper Networks Junos OS on SRX Series and EX Series have been resolved through the application of specific fixes to address each vulnerability
• With a specific request that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities
• Since 25th August we are seeing exploitation attempts from multiple IPs for Juniper J-Web CVE-2023-36844 (& friends) targeting /webauth_operation.php endpoint. Same day an exploit POC was published. This involves combining lower severity CVEs to achieve pre-auth RCE

Headlines

• Aug. 30, 2023 - Threat actors started exploiting Juniper flaws shortly after PoC release
• Aug. 30, 2023 - Recent Juniper Flaws Chained in Attacks Following PoC Exploit Publication
• Aug. 30, 2023 - Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
• Aug. 29, 2023 - Hackers exploit critical Juniper RCE bug chain after PoC release
• Aug. 28, 2023 - Experts published PoC exploit code for Juniper SRX firewall flaws
• Aug. 27, 2023 - Week in review: Security Onion 2.4 released, WinRAR vulnerable to RCE

CVE-2023-36847

MEDIUM CVSS 5.30 EPSS Score 0.05 EPSS Percentile 13.95

Risk Context N/A

Published: Aug. 17, 2023

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S8; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S1; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3.

Vendor Impacted: Juniper

Products Impacted: Srx210, Srx550m, Srx650, Srx4200, Ex4300-24p, Ex2300-24mp, Srx1400, Srx3400, Ex4300-24p-S, Ex4300-48t-Dc-Afi, Ex2300m, Srx340, Ex4650, Srx4100, Ex4300, Ex4300-48t, Ex9214, Srx1500, Ex4300-24t-S, Junos, Ex4300-32f, Ex3200, Ex4300-48tdc, Ex4300m, Ex2300-48p, Ex4300-Mp, Ex4300-48tafi, Ex9253, Srx110, Ex8200, Ex9250, Ex4300-48t-S, Ex4300-48p, Srx4000, Srx4600, Ex9251, Srx300, Ex9200, Ex4300-48p-S, Ex9208, Ex4300-48mp-S, Ex6200, Ex4300-48t-Afi, Ex4300-48tdc-Afi, Ex4300-48t-Dc, Ex4600-Vc, Srx380, Ex4400, Ex9204, Srx5400, Ex3300-Vc, Ex4300-24t, Ex6210, Ex8216, Ex4200, Srx240m, Ex8200-Vc, Ex4550-Vc, Ex8208, Ex4300-32f-S, Ex4300-Vc, Srx240h2, Ex2300-48t, Ex2300, Ex3400, Srx320, Ex4550\/vc, Ex4500, Ex4500-Vc, Srx5600, Ex2200, Ex2300-24p, Ex4550, Srx3600, Srx240, Ex2300-48mp, Srx550, Ex2300-C, Srx100, Ex4300-48mp, Ex4200-Vc, Srx5000, Srx345, Ex4600, Ex2200-Vc, Srx220, Srx5800, Ex3300, Ex4300-32f-Dc, Ex2300-24t, Ex2200-C, Srx550 Hm

Quotes

• Why don’t these developers learn the lesson
• Multiple vulnerabilities in the J-Web component of Juniper Networks Junos OS on SRX Series and EX Series have been resolved through the application of specific fixes to address each vulnerability

Headlines

• Aug. 30, 2023 - Threat actors started exploiting Juniper flaws shortly after PoC release
• Aug. 30, 2023 - Recent Juniper Flaws Chained in Attacks Following PoC Exploit Publication
• Aug. 30, 2023 - Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
• Aug. 28, 2023 - Experts published PoC exploit code for Juniper SRX firewall flaws
• Aug. 27, 2023 - Week in review: Security Onion 2.4 released, WinRAR vulnerable to RCE