← Database

CVE-2023-23295

HIGH CVSS: 8.8 Published: 2023-02-23 Modified: 2026-06-17

Description

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.

Affected Platforms

Korenix Jetwave 4221Hp-E FirmwareKorenix Jetwave 2424 FirmwareKorenix Jetwave 2212GKorenix Jetwave 2212XKorenix Jetwave 3220 V3 FirmwareKorenix Jetwave 2114 FirmwareKorenix Jetwave 2211C FirmwareKorenix Jetwave 2212SKorenix Jetwave 4221Hp-EKorenix Jetwave 2460

Weakness Type

CWE-77, CWE-77

References