CVE-2023-23294
PoC —CVSS 3.1
8.8 high
EPSS
3%p85
Published
()
Modified
Description
Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.
- Vendors
- korenix
- Products
- jetwave 2212g firmware, jetwave 2212x firmware, jetwave 2212s firmware, jetwave 2211c firmware, jetwave 2411 firmware, jetwave 2111 firmware, jetwave 2411l firmware, jetwave 2111l firmware, jetwave 2414 firmware, jetwave 2114 firmware, jetwave 2424 firmware, jetwave 2460 firmware
- Weakness
- CWE-77
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.