HIGH🇵🇱 Wersja polska

CVE-2023-23295

CVSS 8.8v3.1pub. 2023-02-23upd. 2025-03-17

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Korenix Jetwave 2111

    HW
    Korenix
    all versions

  • Korenix Jetwave 2111 Firmware

    OS
    Korenix
    < 1.5

  • Korenix Jetwave 2111l

    HW
    Korenix
    all versions

  • Korenix Jetwave 2111l Firmware

    OS
    Korenix
    < 1.6

  • Korenix Jetwave 2114

    HW
    Korenix
    all versions

  • Korenix Jetwave 2114 Firmware

    OS
    Korenix
    < 1.4

  • Korenix Jetwave 2211c

    HW
    Korenix
    all versions

  • Korenix Jetwave 2211c Firmware

    OS
    Korenix
    < 1.6

  • Korenix Jetwave 2212g

    HW
    Korenix
    all versions

  • Korenix Jetwave 2212g Firmware

    OS
    Korenix
    1.3.t

  • Korenix Jetwave 2212s

    HW
    Korenix
    all versions

  • Korenix Jetwave 2212s Firmware

    OS
    Korenix
    1.3.0

  • Korenix Jetwave 2212x

    HW
    Korenix
    all versions

  • Korenix Jetwave 2212x Firmware

    OS
    Korenix
    1.3.0

  • Korenix Jetwave 2411

    HW
    Korenix
    all versions

  • Korenix Jetwave 2411 Firmware

    OS
    Korenix
    < 1.5

  • Korenix Jetwave 2411l

    HW
    Korenix
    all versions

  • Korenix Jetwave 2411l Firmware

    OS
    Korenix
    < 1.6

  • Korenix Jetwave 2414

    HW
    Korenix
    all versions

  • Korenix Jetwave 2414 Firmware

    OS
    Korenix
    < 1.4

  • Korenix Jetwave 2424 Firmware

    OS
    Korenix
    < 1.3

  • Korenix Jetwave 2460

    HW
    Korenix
    all versions

  • Korenix Jetwave 2460 Firmware

    OS
    Korenix
    < 1.6

  • Korenix Jetwave 3220 V3

    HW
    Korenix
    all versions

  • Korenix Jetwave 3220 V3 Firmware

    OS
    Korenix
    < 1.7

  • Korenix Jetwave 3420 V3

    HW
    Korenix
    all versions

  • Korenix Jetwave 3420 V3 Firmware

    OS
    Korenix
    < 1.7

  • Korenix Jetwave 4221hp E

    HW
    Korenix
    all versions

  • Korenix Jetwave 4221hp E Firmware

    OS
    Korenix
    ≤ 1.3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-12501CRITICAL9.8PL ✓same product

Ukryte konta backdoor w przełącznikach Pepperl+Fuchs RocketLinx

CVE-2020-12504CRITICAL9.8PL ✓same product

Niezabezpieczony serwis TFTP w przełącznikach Pepperl+Fuchs RocketLinx

CVE-2023-23294HIGH8.8same product

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attack...

CVE-2021-39280HIGH8.8same product

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. T...

CVE-2020-12503HIGH7.2same product

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ...