{"schema":"vulnpedia.poc/1","cve":"CVE-2023-36845","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2023-11-13","ransomware":false},"epss":{"score":0.9507,"percentile":0.99862},"cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/junos_phprc_auto_prepend_file.rb","executable":true,"sourceId":"exploit/freebsd/http/junos_phprc_auto_prepend_file","description":"Junos OS PHPRC Environment Variable Manipulation RCE","verification":"catalogued","source":"metasploit","modified":"2025-12-17 16:12:31 +0000","origins":[{"source":"metasploit","sourceId":"exploit/freebsd/http/junos_phprc_auto_prepend_file","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/junos_phprc_auto_prepend_file.rb"},{"source":"metasploit","sourceId":"exploit/freebsd/http/junos_phprc_auto_prepend_file","modified":"2025-12-17 16:12:31 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/http/junos_phprc_auto_prepend_file.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/db1e7b347773","executable":false,"sourceId":"db1e7b347773","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"db1e7b347773","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/db1e7b347773"}],"repositoryUrl":"https://github.com/PortSwigger/BChecks"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/861198e6f367","executable":false,"sourceId":"861198e6f367","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"861198e6f367","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/861198e6f367"}],"repositoryUrl":"https://github.com/vulncheck-oss/cve-2023-36845-scanner"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/fcb027407d46","executable":false,"sourceId":"fcb027407d46","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fcb027407d46","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/fcb027407d46"}],"repositoryUrl":"https://github.com/watchtowrlabs/juniper-rce_cve-2023-36844"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/549b4b2e791e","executable":false,"sourceId":"549b4b2e791e","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"549b4b2e791e","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/549b4b2e791e"}],"repositoryUrl":"https://github.com/r3dcl1ff/CVE-2023-36844_Juniper_RCE"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7f3ac2cfdf5a","executable":false,"sourceId":"7f3ac2cfdf5a","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7f3ac2cfdf5a","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/7f3ac2cfdf5a"}],"repositoryUrl":"https://github.com/halencarjunior/CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f2e8c180103f","executable":false,"sourceId":"f2e8c180103f","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f2e8c180103f","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/f2e8c180103f"}],"repositoryUrl":"https://github.com/cyb3rzest/Juniper-Bug-Automation-CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f1599fa5e102","executable":false,"sourceId":"f1599fa5e102","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f1599fa5e102","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/f1599fa5e102"}],"repositoryUrl":"https://github.com/iveresk/CVE-2023-36845-6-"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f6208bcc8206","executable":false,"sourceId":"f6208bcc8206","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f6208bcc8206","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/f6208bcc8206"}],"repositoryUrl":"https://github.com/zaenhaxor/CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/bea8d1e01668","executable":false,"sourceId":"bea8d1e01668","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bea8d1e01668","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/bea8d1e01668"}],"repositoryUrl":"https://github.com/CharonDefalt/Juniper-exploit-CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c5b62df0eae0","executable":false,"sourceId":"c5b62df0eae0","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c5b62df0eae0","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/c5b62df0eae0"}],"repositoryUrl":"https://github.com/cyberh3als/CVE-2023-36845-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a2f2dd7e0a50","executable":false,"sourceId":"a2f2dd7e0a50","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a2f2dd7e0a50","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/a2f2dd7e0a50"}],"repositoryUrl":"https://github.com/0xNehru/CVE-2023-36845-Juniper-Vulnerability"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/19b6c8bddf2d","executable":false,"sourceId":"19b6c8bddf2d","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"19b6c8bddf2d","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/19b6c8bddf2d"}],"repositoryUrl":"https://github.com/CKevens/ansible-cve-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3fdde8c21f6e","executable":false,"sourceId":"3fdde8c21f6e","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3fdde8c21f6e","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/3fdde8c21f6e"}],"repositoryUrl":"https://github.com/functionofpwnosec/CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f715efbe5fe8","executable":false,"sourceId":"f715efbe5fe8","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f715efbe5fe8","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/f715efbe5fe8"}],"repositoryUrl":"https://github.com/Asbawy/Automation-for-Juniper-cve-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/539fa0525155","executable":false,"sourceId":"539fa0525155","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"539fa0525155","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/539fa0525155"}],"repositoryUrl":"https://github.com/ak1t4/CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/23f413cb1c62","executable":false,"sourceId":"23f413cb1c62","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"23f413cb1c62","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/23f413cb1c62"}],"repositoryUrl":"https://github.com/ifconfig-me/CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/eb307a27c46c","executable":false,"sourceId":"eb307a27c46c","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"eb307a27c46c","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/eb307a27c46c"}],"repositoryUrl":"https://github.com/kljunowsky/CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/4fae7ca850e5","executable":false,"sourceId":"4fae7ca850e5","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4fae7ca850e5","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/4fae7ca850e5"}],"repositoryUrl":"https://github.com/simrotion13/CVE-2023-36845"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/40881a555da5","executable":false,"sourceId":"40881a555da5","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"40881a555da5","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/40881a555da5"}],"repositoryUrl":"https://github.com/jahithoque/Juniper-CVE-2023-36845-Mass-Hunting"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/6ab01cd57d8e","executable":false,"sourceId":"6ab01cd57d8e","verification":"catalogued","source":"vulncheck-kev","modified":"2023-08-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6ab01cd57d8e","modified":"2023-08-29T00:00:00Z","url":"https://vulncheck.com/xdb/6ab01cd57d8e"}],"repositoryUrl":"https://github.com/kopfjager007/CVE-2023-36845"}],"poc_candidates":[{"url":"https://github.com/vulncheck-oss/cve-2023-36845-scanner","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"A go-exploit to scan for Juniper firewalls vulnerable to CVE-2023-36845","modified":"2026-05-17T08:32:34Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/vulncheck-oss/cve-2023-36845-scanner"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2026-05-17T08:32:34Z","url":"https://github.com/vulncheck-oss/cve-2023-36845-scanner"}],"tags":[]},{"url":"https://github.com/kljunowsky/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"Juniper Firewalls CVE-2023-36845 - RCE","modified":"2026-03-10T08:22:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/kljunowsky/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2026-03-10T08:22:25Z","url":"https://github.com/kljunowsky/CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/halencarjunior/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2023-09-28T19:28:33Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/halencarjunior/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2023-09-28T19:28:33Z","url":"https://github.com/halencarjunior/CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/zaenhaxor/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"CVE-2023-36845 - Juniper Firewall Remote code execution (RCE)","modified":"2026-07-10T00:59:59Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/zaenhaxor/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2026-07-10T00:59:59Z","url":"https://github.com/zaenhaxor/CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/simrotion13/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2023-10-18T09:56:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/simrotion13/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2023-10-18T09:56:27Z","url":"https://github.com/simrotion13/CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/cyberh3als/CVE-2023-36845-POC","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"CVE-2023-36845 PoC script automates the PoC for CVE-2023-36845 targeting Juniper Networks Junos OS's J-Web component on EX and SRX Series devices. It exploits a PHP flaw, allowing remote modification of the PHPRC variable. Successful exploitation can lead to code injection and execution.","modified":"2025-08-29T07:13:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/cyberh3als/CVE-2023-36845-POC"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2025-08-29T07:13:40Z","url":"https://github.com/cyberh3als/CVE-2023-36845-POC"}],"tags":[]},{"url":"https://github.com/P4x1s/ansible-cve-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)","modified":"2024-02-22T12:58:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/P4x1s/ansible-cve-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-02-22T12:58:22Z","url":"https://github.com/P4x1s/ansible-cve-2023-36845"}],"tags":[]},{"url":"https://github.com/Asbawy/Automation-for-Juniper-cve-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"Simple Automation script for juniper cve-2023-36845","modified":"2025-12-03T19:15:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/Asbawy/Automation-for-Juniper-cve-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2025-12-03T19:15:51Z","url":"https://github.com/Asbawy/Automation-for-Juniper-cve-2023-36845"}],"tags":[]},{"url":"https://github.com/jahithoque/Juniper-CVE-2023-36845-Mass-Hunting","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"Juniper RCE (Remote Code Execution) CVE-2023-36845 is a vulnerability that has been identified within Juniper's software. This particular flaw allows for remote code execution, meaning an attacker could run arbitrary code on a system without needing physical access to the device.","modified":"2024-02-12T07:51:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/jahithoque/Juniper-CVE-2023-36845-Mass-Hunting"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-02-12T07:51:29Z","url":"https://github.com/jahithoque/Juniper-CVE-2023-36845-Mass-Hunting"}],"tags":[]},{"url":"https://github.com/cyb3rzest/Juniper-Bug-Automation-CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-02-01T04:12:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/cyb3rzest/Juniper-Bug-Automation-CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-02-01T04:12:54Z","url":"https://github.com/cyb3rzest/Juniper-Bug-Automation-CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/CharonDefalt/Juniper-exploit-CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-07-06T12:16:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/CharonDefalt/Juniper-exploit-CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-07-06T12:16:37Z","url":"https://github.com/CharonDefalt/Juniper-exploit-CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/iveresk/CVE-2023-36845-6-","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"CVE-2023-36845 и CVE-2023-36846 Juniper Junos OS J-Web RCE","modified":"2024-02-13T15:11:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/iveresk/CVE-2023-36845-6-"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-02-13T15:11:24Z","url":"https://github.com/iveresk/CVE-2023-36845-6-"}],"tags":[]},{"url":"https://github.com/ak1t4/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"CVES ","modified":"2025-02-14T17:11:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/ak1t4/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2025-02-14T17:11:58Z","url":"https://github.com/ak1t4/CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/0xNehru/CVE-2023-36845-Juniper-Vulnerability","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"This Python script automates the Proof of Concept (PoC) for CVE-2023-36845, a vulnerability impacting Juniper Networks Junos OS on EX and SRX Series devices. The vulnerability resides in the J-Web component, allowing remote manipulation of the PHPRC variable, potentially leading to code injection.","modified":"2026-03-09T13:54:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/0xNehru/CVE-2023-36845-Juniper-Vulnerability"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2026-03-09T13:54:16Z","url":"https://github.com/0xNehru/CVE-2023-36845-Juniper-Vulnerability"}],"tags":[]},{"url":"https://github.com/ifconfig-me/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. ","modified":"2024-02-17T08:16:33Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/ifconfig-me/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2024-02-17T08:16:33Z","url":"https://github.com/ifconfig-me/CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/e11i0t4lders0n/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"CVE-2023-36845 – Unauthenticated Juniper Remote Code Execution Vulnerability Scanner","modified":"2025-01-14T05:59:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/e11i0t4lders0n/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2025-01-14T05:59:12Z","url":"https://github.com/e11i0t4lders0n/CVE-2023-36845"}],"tags":[]},{"url":"https://github.com/kopfjager007/CVE-2023-36845","source":"poc-in-github","sourceId":"CVE-2023-36845","description":"Juniper JunOS J-Web PHP external variable modification (CVE-2023-36845) exploit.","modified":"2025-11-24T13:34:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-36845","url":"https://github.com/kopfjager007/CVE-2023-36845"},{"source":"poc-in-github","sourceId":"CVE-2023-36845","modified":"2025-11-24T13:34:57Z","url":"https://github.com/kopfjager007/CVE-2023-36845"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2023-36845 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2023-36845/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36845.yaml","template":"http/cves/2023/CVE-2023-36845.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2023-36845%22&type=repositories","executable":false}]}