Korenix Jetwave 2411l Firmware vulnerabilities

3 CVEs affecting Korenix Jetwave 2411l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-23296, published 2023-02-23.

More from Korenix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-23295, published 2023-02-23. High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days. Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as…
• CVE-2023-23294, published 2023-02-23. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.
• CVE-2023-23296, published 2023-02-23. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.