← Database

CVE-2021-39280

HIGH CVSS: 8.8 Published: 2022-02-06 Modified: 2026-06-17

Description

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

Affected Platforms

Korenix Jetwave 2212X FirmwareKorenix Jetwave 2311 FirmwareKorenix Jetwave 2212S FirmwareKorenix Jetwave 3420Korenix Jetwave 2212G FirmwareKorenix Jetwave 2212GKorenix Jetwave 2212XKorenix Jetwave 3220 FirmwareKorenix Jetwave 2311Korenix Jetwave 3420 Firmware

Weakness Type

NVD-CWE-noinfo

References