Korenix Jetwave 2424 vulnerabilities
3 vulnerabilities
Known vulnerabilities in Korenix Jetwave 2424, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-23294korenixjetwave_2111_firmware+14
EPSS score2.69%
Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.CVE-2023-23296korenixjetwave_2111_firmware+14EPSS score0.80%
Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.CVE-2023-23295korenixjetwave_2111_firmware+14EPSS score3.83%
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.