CVE-2023-36847 CISA KEV · Actively exploited
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
CVSS score
—
EPSS probability
%83.5
Risk score
—
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
A Proof of Concept for chaining the CVEs [CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847] to achieve Remote Code Execution (phpinfo) in Juniper JunOS within SRX and EX Series products.Modified from original exploit developed by @watchTowr .
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2015-5477 Actively exploitedVulnerability in N/a
Patch verified Public Exploits:2EPSS %99
5.0
CVE-2004-0230Vulnerability in N/a
Patch verified Public Exploits:7EPSS %80
4.4
CVE-2025-21590 Actively exploitedVulnerability in Juniper Junos
WorkaroundEPSS %2
5.3
CVE-2025-60006OS command injection in Juniper Junos OS Evolved
Patch status unknownEPSS %1
9.0
CVE-2025-59978Cross-site scripting in Juniper Junos Space
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-36847"