Nearly 12,000 internet-facing Juniper firewall devices were discovered by VulnCheck to be impacted by a new medium-severity remote code execution vulnerability, which could be exploited to facilitate the execution of arbitrary code without the need to create a file, The Hacker News reports. Such a flaw, tracked as CVE-2023-36845, stems from the Junos OS’s J-Web component and has already been addressed by Juniper in an out-of-cycle update last month.

Source: SC Magazine