Skip to content
OpenAdvisories
High ICSA-23-096-04 3 CVEs

Korenix Jetwave

Published Apr 10, 2023 · Updated Apr 10, 2023

Vendor: Korenix Product: JetWave 2211C Product: JetWave 2212G Product: JetWave 2212X/2112S Product: JetWave 2411/2111 Product: JetWave 2411L/2111L Product: JetWave 2414/2114 Product: JetWave 2424 Product: JetWave 2460 Product: JetWave 3220/3420 V3 Product: JetWave4221 HP-E

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain full access to the underlying operating system of the device or cause a denial-of-service condition.

Vulnerabilities 3

  • High 8.8
    CVE-2023-23295

    Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSys…

  • Medium 6.5
    CVE-2023-23296

    Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDef…

  • Unscored —
    CVE-2023-23294

    Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can mo…

Revision history

  1. #1

    CSAF Creation Date

References