CVE-2023-28962— Juniper Networks Junos OS 代码问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2023-28962の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Junos OS: Unauthenticated access vulnerability in J-Web
ソース: NVD (National Vulnerability Database)
脆弱性説明
An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3-S6; 21.1 version 21.1R1 and later versions; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
认证机制不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Juniper Networks Junos OS 代码问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS存在授权问题漏洞，该漏洞源于 J-Web 组件存在身份验证不当，攻击者利用该漏洞可以读取属于用户“nobody”的任何文件，包括敏感会话信息，以下产品和版本受到影响：Juniper Networks Junos OS 19.4R3-S11 之前的所有版本、20
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Juniper Networks | Junos OS | unspecified ~ 19.4R3-S11 | - |
II. CVE-2023-28962の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2023-28962のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Juniper Networks · 2023-04-17 · 25 CVEs total
| CVE-2023-28983 | 8.8 HIGH | Junos OS Evolved: Shell Injection vulnerability in the gNOI server |
| CVE-2023-28960 | 8.2 HIGH | Junos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user |
| CVE-2023-28966 | 7.8 HIGH | Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as |
| CVE-2023-28976 | 7.5 HIGH | Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead |
| CVE-2023-28982 | 7.5 HIGH | Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently u |
| CVE-2023-28964 | 7.5 HIGH | Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash |
| CVE-2023-28967 | 7.5 HIGH | Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash |
| CVE-2023-28974 | 7.4 HIGH | Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from sub |
| CVE-2023-28971 | 7.2 HIGH | Paragon Active Assurance: Enabling the timescaledb enables IP forwarding |
| CVE-2023-28973 | 7.1 HIGH | Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some |
| CVE-2023-28972 | 6.8 MEDIUM | Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery |
| CVE-2023-28970 | 6.5 MEDIUM | Junos OS: JRR200: Kernel crash upon receipt of a specific packet |
| CVE-2023-28965 | 6.5 MEDIUM | Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service |
| CVE-2023-28981 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memor |
| CVE-2023-28959 | 6.5 MEDIUM | Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets |
| CVE-2023-1697 | 6.5 MEDIUM | Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed e |
| CVE-2023-28961 | 5.8 MEDIUM | Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header |
| CVE-2023-28980 | 5.5 MEDIUM | Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen sho |
| CVE-2023-28978 | 5.3 MEDIUM | Junos OS Evolved: Read access to some confidential user information is possible |
| CVE-2023-28963 | 5.3 MEDIUM | Junos OS: User-controlled input vulnerability in J-Web |
Showing 20 of 25 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Junos OS
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33781
Junos OS: EX Series, QFX Series: In a VXLAN scenario when sp
同じベンダー: Juniper Networks
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33784
JSI Virtual Lightweight Collector: Default password is not r
同じ弱点: CWE-287
- CVE-2026-8244
Industrial Application Software IAS Canias ERP Login RMI imp - CVE-2026-8216
Industrial Application Software IAS Canias ERP Java RMI Sess - CVE-2026-8214
Industrial Application Software IAS Canias ERP RMI doAction - CVE-2026-42560
auth: Patreon provider assigns the same local user ID to eve - CVE-2026-41070
openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, all
V. CVE-2023-28962へのコメント
まだコメントはありません