High · 8.8 CVE-2023-23295 EUVD-2023-27395GHSA-q74f-hvfr-7jqc

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an …

Published Feb 23, 2023 · Updated Mar 17, 2025 · Assigned by mitre

Description

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.

Advisories 1

ICSA-23-096-04 Korenix Jetwave CISA ICS & IT advisories · Apr 10, 2023

References

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/