Korenix vulnerabilities
20 vulnerabilities
Known vulnerabilities in Korenix products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 100 products.
Products
50 of 100- Jetwave 2212G7 vulnerabilities
- Jetwave 2212S7 vulnerabilities
- Jetwave 2212X7 vulnerabilities
- Jetnet5 vulnerabilities
- Jetwave 23114 vulnerabilities
- Jetwave 32204 vulnerabilities
- Jetport 5601V33 vulnerabilities
- Jetwave 21113 vulnerabilities
- Jetwave 2111L3 vulnerabilities
- Jetwave 21143 vulnerabilities
- Jetwave 2211C3 vulnerabilities
- Jetwave 24113 vulnerabilities
- Jetwave 2411L3 vulnerabilities
- Jetwave 24143 vulnerabilities
- Jetwave 24243 vulnerabilities
- Jetwave 24603 vulnerabilities
- Jetwave 3220 V33 vulnerabilities
- Jetwave 3420 V33 vulnerabilities
- Jetwave 4221Hp E3 vulnerabilities
- Jetnet 45082 vulnerabilities
- Jetnet 4508 W2 vulnerabilities
- Jetnet 4508F M2 vulnerabilities
- Jetnet 4508F Mw2 vulnerabilities
- Jetnet 4508F S2 vulnerabilities
- Jetnet 4508F Sw2 vulnerabilities
- Jetnet 4508I W2 vulnerabilities
- Jetnet 4508If M2 vulnerabilities
- Jetnet 4508If Mw2 vulnerabilities
- Jetnet 4508If S2 vulnerabilities
- Jetnet 4508If Sw2 vulnerabilities
- Jetnet 45102 vulnerabilities
- Jetnet 47062 vulnerabilities
- Jetnet 4706F2 vulnerabilities
- Jetnet 50102 vulnerabilities
- Jetnet 53102 vulnerabilities
- Jetnet 5310G2 vulnerabilities
- Jetnet 5428G 20Sfp2 vulnerabilities
- Jetnet 5612G 4F2 vulnerabilities
- Jetnet 5612Gp 4F2 vulnerabilities
- Jetnet 5620G 4C2 vulnerabilities
- Jetnet 5728G 24P Ac 2Dc Eu2 vulnerabilities
- Jetnet 5728G 24P Ac 2Dc Us2 vulnerabilities
- Jetnet 5810G2 vulnerabilities
- Jetnet 60952 vulnerabilities
- Jetnet 6528Gf 2Ac Eu2 vulnerabilities
- Jetnet 6528Gf 2Ac Us2 vulnerabilities
- Jetnet 6528Gf 2Dc242 vulnerabilities
- Jetnet 6528Gf 2Dc482 vulnerabilities
- Jetnet 6528Gf Ac Eu2 vulnerabilities
- Jetnet 6528Gf Ac Us2 vulnerabilities
CVE-2021-39280korenixjetwave_2212g_firmware+5
EPSS score2.31%
Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.CVE-2020-12501korenixjetnet+15EPSS score3.34%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use undocumented accounts.CVE-2020-12502korenixjetnet+12EPSS score1.03%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.CVE-2020-12500korenixjetnet+2EPSS score2.89%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) allows unauthenticated device administration.CVE-2020-12504korenixjetnet+19EPSS score3.02%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an active TFTP-Service.CVE-2020-12503korenixjetnet+17EPSS score22.83%
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to multiple authenticated command injections.CVE-2012-4577korenixjetportEPSS score3.60%
The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session.CVE-2017-14027korenixjetnet5018g_firmware+8EPSS score2.85%
A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. The software uses undocumented hard-coded credentials that may allow an attacker to gain remote access.CVE-2017-14021korenixjetnet5018g_firmware+8EPSS score1.92%
A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.CVE-2024-2371korenixjeti/o 6550EPSS score0.18%
Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials.CVE-2024-11303korenixjetport_5601_firmwareEPSS score1.78%
The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601: through 1.2.CVE-2024-7396korenixjetport 5601v3EPSS score0.29%
Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2.CVE-2024-7397korenixjetport 5601v3EPSS score1.38%
Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2.CVE-2024-7395korenixjetport 5601v3EPSS score0.90%
An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the device without specifying a password.This issue affects JetPort 5601v3: through 1.2.CVE-2019-9725korenixjetport_5601_firmware+2EPSS score0.86%
The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.CVE-2023-5347korenixjetnet_4508_firmware+42EPSS score1.34%
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.CVE-2023-5376korenixjetnet_4508_firmware+42EPSS score1.41%
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.CVE-2023-23294korenixjetwave_2111_firmware+14EPSS score2.69%
Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.CVE-2023-23296korenixjetwave_2111_firmware+14EPSS score0.80%
Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.CVE-2023-23295korenixjetwave_2111_firmware+14EPSS score3.83%
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.