In the attack chain observed by Juniper Threat Labs, CVE-2023-46805 is exploited to gain access to the “https://blogs.juniper.net/api/v1/license/key-status/;” endpoint, which is vulnerable to command injection, and inject the payload.