{"uuid": "49f7d26f-2c6c-4e8b-8cee-80dcdfef4df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36845", "type": "seen", "source": "https://t.me/hacking_Attack/119276", "content": "efore 22.1R3-S3\n* 22.2 versions before 22.2R3-S2\n* 22.3 versions before 22.3R2-S2, 22.3R3\n* 22.4 versions before 22.4R2-S1, 22.4R3\n\nJuniper released security updates to address the vulnerability on August 17, 2023. However, due to its low initial severity rating, many affected users might have postponed applying the updates.\n\nVulnCheck\u2019s network scans identified 14,951 Juniper devices with internet-exposed web interfaces. From a sample size of 3,000 devices, Baines found that 79% were vulnerable to this remote code execution flaw.\n\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/APTs/46/shodan-scan.png Shodan scan result (VulnCheck)\nSince hackers are already exploring the opportunity to leverage CVE-2023-36845 in attacks, Juniper admins must apply these updates as soon as possible, as they could be used to gain initial access to corporate networks.\nTrending: New Phishing Campaign Exploits Microsoft Teams to Deliver DarkGate Loader Malware Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-5-300x150.png Facebook Business Accounts Under Attack: NodeStealer Variant Harvests Credentials\nSeptember 18, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-4-300x150.png MGM Resorts Hit by BlackCat Ransomware Affiliate: Data Stolen, Operations Halted\nSeptember 15, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-3-300x150.png Critical Kubernetes Flaws Expose Windows Endpoints to Remote Code Execution\nSeptember 14, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-2-300x150.png MetaStealer: New macOS Malware Targeting Intel-Based Computers Emerges\nSeptember 13, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking Course\n\nBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security Solutions\n\nFind out how Pentesting Services can help you.\nThe post 12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-02T01:01:08.751797Z"}