60
CVE-2023-23295
PoC —CVSS 3.1
8.8 high
EPSS
4%p90
Published
()
Modified
Description
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.
- Vendors
- korenix
- Products
- jetwave 2212g firmware, jetwave 2212x firmware, jetwave 2212s firmware, jetwave 2211c firmware, jetwave 2411 firmware, jetwave 2111 firmware, jetwave 2411l firmware, jetwave 2111l firmware, jetwave 2414 firmware, jetwave 2114 firmware, jetwave 2424 firmware, jetwave 2460 firmware
- Weakness
- CWE-77
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H