---
id: 6149
title: "Juniper SSLVPN / JunOS RCE and Multiple Vulnerabilities"
source_domain: pwn.ai
source_url: "https://pwn.ai/blog/juniper-sslvpn-junos-rce-and-multiple-vulnerabilities"
published_at: "2022-10-28T08:30:00Z"
tags: ["rce", "xss", "deserialization", "juniper", "cve-2022-22241", "cve-2022-22242"]
phying_url: "https://phying.com/item/6149"
lang: en
---

# Juniper SSLVPN / JunOS RCE and Multiple Vulnerabilities

## Summary

Octagon Networks details two Juniper pre-auth bugs: CVE-2022-22241, a Phar deserialization chain in J-Web leading to RCE, and CVE-2022-22242, a reflected XSS on the error page.

## Intelligence Metadata

- **Sources:** pwn.ai
- **Published:** 2022-10-28T08:30:00Z
- **Original:** https://pwn.ai/blog/juniper-sslvpn-junos-rce-and-multiple-vulnerabilities
- **Phying News:** https://phying.com/item/6149