Four Juniper vulnerabilities added to KEV catalog

Ongoing remote code execution attacks leveraging four Juniper J-Web interface vulnerabilities, tracked from CVE-2023-36844 to CVE-2023-36847, in a pre-auth exploit chain have led to their inclusion in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, BleepingComputer reports.

agency attacks auth bleepingcomputer catalog code code execution cve cve-2023-36844 cybersecurity exploit exploit chain exploited exploited vulnerabilities governance risk and compliance inclusion infrastructure infrastructure security interface juniper kev kev catalog known exploited known exploited vulnerabilities known exploited vulnerabilities catalog led patchconfiguration-management remote code remote code execution reports security vulnerabilities vulnerability management web web interface