CVE-2023-23294: Korenix Jetwave 2111 Firmware

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.

Affected products

• Korenix Jetwave 2111 Firmware: before 1.5 (fixed in 1.5)
• Korenix Jetwave 2111l Firmware: before 1.6 (fixed in 1.6)
• Korenix Jetwave 2114 Firmware: before 1.4 (fixed in 1.4)
• Korenix Jetwave 2211c Firmware: before 1.6 (fixed in 1.6)
• Korenix Jetwave 2212g Firmware: version 1.3.t only
• Korenix Jetwave 2212s Firmware: version 1.3.0 only
• Korenix Jetwave 2212x Firmware: version 1.3.0 only
• Korenix Jetwave 2411 Firmware: before 1.5 (fixed in 1.5)
• Korenix Jetwave 2411l Firmware: before 1.6 (fixed in 1.6)
• Korenix Jetwave 2414 Firmware: before 1.4 (fixed in 1.4)
• Korenix Jetwave 2424 Firmware: before 1.3 (fixed in 1.3)
• Korenix Jetwave 2460 Firmware: before 1.6 (fixed in 1.6)
• Korenix Jetwave 3220 v3 Firmware: before 1.7 (fixed in 1.7)
• Korenix Jetwave 3420 v3 Firmware: before 1.7 (fixed in 1.7)
• Korenix Jetwave 4221hp-E Firmware: up to and including 1.3.0

Published 2023-02-23. Last modified 2026-06-17.