Unscored CVE-2023-23294 EUVD-2023-27394GHSA-592f-9p68-85hv

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name p…

Published Feb 23, 2023 · Updated Mar 12, 2025 · Assigned by mitre

Description

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.

Advisories 1

ICSA-23-096-04 Korenix Jetwave CISA ICS & IT advisories · Apr 10, 2023

References

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/