Description
Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution environment allowing the injection und execution of code.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Junos OS | Juniper Networks / Junos OS | >= 0, < 20.4R3-S9 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.1, < 21.1* | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.2, < 21.2R3-S7 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.3, < 21.3R3-S5 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 21.4, < 21.4R3-S5 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.1, < 22.1R3-S4 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.2, < 22.2R3-S2 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.3, < 22.3R2-S2, 22.3R3-S1 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 22.4, < 22.4R2-S1, 22.4R3 | affected |
| Junos OS | Juniper Networks / Junos OS | >= 23,2, < 23.2R1-S1, 23.2R2 | affected |