[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhsaAYIsVr2We52UYspPERIwjCj56kXoDiTEcPEy-49E":3,"g5a-family:juniper\u002Fsrx110":116,"g5a-ex:juniper\u002Fsrx110@*":117},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":79,"seoMetadata":94,"meta":113},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"juniper","srx110",0,94,3,"2024-07-11",[],"Srx110 by Juniper is a technology product and 94 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,31,39,44,51,57,63,68,74],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2023-36845","A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series \n\nand SRX Series \n\nallows an unauthenticated, network-based attacker to remotely execute code.\n\nUsing a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code.\n\n\nThis issue affects Juniper Networks Junos OS on EX Series\n\n\nand \n\n\nSRX Series:\n\n\n\n  *  All versions prior to \n\n20.4R3-S9;\n  *  21.1 versions 21.1R1 and later;\n  *  21.2 versions prior to 21.2R3-S7;\n  *  21.3 versions prior to 21.3R3-S5;\n  *  21.4 versions prior to 21.4R3-S5;\n  *  22.1 versions \n\nprior to \n\n22.1R3-S4;\n  *  22.2 versions \n\nprior to \n\n22.2R3-S2;\n  *  22.3 versions \n\nprior to \n\n22.3R2-S2, 22.3R3-S1;\n  *  22.4 versions \n\nprior to \n\n22.4R2-S1, 22.4R3;\n  *  23.2 versions prior to 23.2R1-S1, 23.2R2.","2023-08-17",9.8,"v3.1","Critical",0.9507,{"cveId":26,"description":27,"publishedDate":20,"cvssScore":28,"cvssVersion":22,"severity":29,"isKev":4,"epssScore":30},"CVE-2023-36846","A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.\n\n\n\nWith a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of \n\nintegrity\n\nfor a certain \n\npart of the file system, which may allow chaining to other vulnerabilities.\n\n\nThis issue affects Juniper Networks Junos OS on SRX Series:\n\n\n\n  *  All versions prior to 20.4R3-S8;\n  *  21.1 versions 21.1R1 and later;\n  *  21.2 versions prior to 21.2R3-S6;\n  *  21.3 versions \n\nprior to \n\n 21.3R3-S5;\n  *  21.4 versions \n\nprior to \n\n21.4R3-S5;\n  *  22.1 versions \n\nprior to \n\n22.1R3-S3;\n  *  22.2 versions \n\nprior to \n\n22.2R3-S2;\n  *  22.3 versions \n\nprior to \n\n22.3R2-S2, 22.3R3;\n  *  22.4 versions \n\nprior to \n\n22.4R2-S1, 22.4R3.\n\n\n\n\n",5.3,"Medium",0.93473,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":22,"severity":36,"isKev":37,"epssScore":38},"CVE-2016-1286","named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.","2016-03-09",8.6,"High",false,0.621,{"cveId":40,"description":41,"publishedDate":34,"cvssScore":42,"cvssVersion":22,"severity":29,"isKev":37,"epssScore":43},"CVE-2016-1285","named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.",6.8,0.59143,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":49,"severity":29,"isKev":37,"epssScore":50},"CVE-2014-9708","Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by \"Range: x=,\".","2015-03-31",5,"v2",0.56191,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":22,"severity":36,"isKev":37,"epssScore":56},"CVE-2017-3145","BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.","2019-01-16",7.5,0.2793,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":49,"severity":23,"isKev":37,"epssScore":62},"CVE-2013-4685","Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.","2013-07-11",10,0.07624,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":42,"cvssVersion":49,"severity":29,"isKev":37,"epssScore":67},"CVE-2013-6013","Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.","2013-10-17",0.03997,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":49,"severity":36,"isKev":37,"epssScore":73},"CVE-2014-0618","Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.","2014-01-11",7.8,0.03571,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":72,"cvssVersion":49,"severity":36,"isKev":37,"epssScore":78},"CVE-2014-3817","Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 on SRX Series devices, when NAT protocol translation from IPv4 to IPv6 is enabled, allows remote attackers to cause a denial of service (flowd hang or crash) via a crafted packet.","2014-07-11",0.03367,[80,85,88],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":81,"cisaDateAdded":82,"cisaShortDescription":83,"cisaRequiredAction":84},"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","2023-11-13","Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution environment allowing the injection und execution of code.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":26,"description":27,"publishedDate":20,"cvssScore":28,"severity":29,"isKev":4,"epssScore":30,"cisaVulnName":86,"cisaDateAdded":82,"cisaShortDescription":87,"cisaRequiredAction":84},"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.",{"cveId":89,"description":90,"publishedDate":91,"cvssScore":28,"severity":29,"isKev":4,"epssScore":92,"cisaVulnName":86,"cisaDateAdded":82,"cisaShortDescription":93,"cisaRequiredAction":84},"CVE-2023-36851","A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.\n\n\n\nWith a specific request to \n\nwebauth_operation.php\n\nthat doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of \n\nintegrity or confidentiality, which may allow chaining to other vulnerabilities.\n\n\nThis issue affects Juniper Networks Junos OS on SRX Series:\n\n\n\n  *  \n\n21.2 versions prior to 21.2R3-S8;\n  *  21.4 \n\nversions prior to \n\n21.4R3-S6;\n  *  22.1 \n\nversions prior to \n\n22.1R3-S5;\n  *  22.2 \n\nversions prior to \n\n22.2R3-S3;\n  *  22.3 \n\nversions prior to \n\n22.3R3-S2;\n  *  22.4 versions prior to 22,4R2-S2, 22.4R3;\n  *  23.2 versions prior to \n\n23.2R1-S2, 23.2R2.\n\n\n","2023-09-27",0.01123,"Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.",{"title":95,"metaDescription":96,"keywords":97,"structuredData":98},"Srx110 by Juniper - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Srx110 by Juniper with 94 tracked vulnerabilities including 1 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Srx110 vulnerabilities, Srx110 security, Srx110 CVE, Juniper Srx110, Srx110 threat intelligence, Juniper security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Srx110 KEV, Srx110 exploited vulnerabilities",{"@context":99,"@type":100,"name":101,"description":96,"url":102,"manufacturer":103,"applicationCategory":107,"softwareVersion":108,"mainEntity":109},"https:\u002F\u002Fschema.org","SoftwareApplication","Srx110","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fjuniper\u002Fsrx110",{"@type":104,"name":105,"url":106},"Organization","Juniper","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fjuniper","Security Software","Multiple versions",{"@type":110,"name":111,"description":112,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Srx110 Security Vulnerabilities","Security vulnerabilities affecting Srx110 by Juniper",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":114,"apiVersion":115},"2026-10-17T16:39:53.943Z","3.0",[],{"rows":118,"total":11,"capped":37,"failed":9},[119,123,127],{"cveId":18,"name":81,"severity":23,"cvss":21,"added":82,"epss":24,"published":120,"ranges":121,"checked":4,"hits":122,"covers":37},"2023-08-17T20:15:10.36",[],[],{"cveId":26,"name":86,"severity":29,"cvss":28,"added":82,"epss":30,"published":124,"ranges":125,"checked":4,"hits":126,"covers":37},"2023-08-17T20:15:10.457",[],[],{"cveId":89,"name":86,"severity":29,"cvss":28,"added":82,"epss":92,"published":128,"ranges":129,"checked":4,"hits":130,"covers":37},"2023-09-27T15:18:54.877",[],[]]