The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA72300 advisory.

  - A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX and SRX Series     allows an unauthenticated, network-based attacker to control certain, important environments variables.
    Utilizing a crafted request an attacker is able to modify certain PHP environments variables leading to     partial loss of integrity, which may allow chaining to other vulnerabilities. (CVE-2023-36844, CVE-2023-36845)

  - A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX and SRX Series     allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
    With a specific request that doesn't require authentication an attacker is able to upload arbitrary files     via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining     to other vulnerabilities. (CVE-2023-36846, CVE-2023-36847)

Note: Nessus found J-Web enabled [set system services web-management http(s)] on this device.

Detections

Analytics

Juniper Junos OS Pre-Auth RCE (JSA72300)

critical Nessus Plugin ID 180190

Version 1.14