← Database

CVE-2023-23294

HIGH CVSS: 8.8 Published: 2023-02-23 Modified: 2026-06-17

Description

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.

Affected Platforms

Korenix Jetwave 4221Hp-E FirmwareKorenix Jetwave 2424 FirmwareKorenix Jetwave 2212GKorenix Jetwave 2212XKorenix Jetwave 3220 V3 FirmwareKorenix Jetwave 2114 FirmwareKorenix Jetwave 2211C FirmwareKorenix Jetwave 2212SKorenix Jetwave 4221Hp-EKorenix Jetwave 2460

Weakness Type

CWE-77

References