Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC2

CVE-2023-23295

CVSS 3.1
8.8 high
EPSS
4%p90
Published
·
Modified
Analyze CVE-2023-23295 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.

Vendors
korenix
Products
jetwave 2212g firmware, jetwave 2212x firmware, jetwave 2212s firmware, jetwave 2211c firmware, jetwave 2411 firmware, jetwave 2111 firmware, jetwave 2411l firmware, jetwave 2111l firmware, jetwave 2414 firmware, jetwave 2114 firmware, jetwave 2424 firmware, jetwave 2460 firmware
Weakness
CWE-77
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news

1 story