Korenix Jetwave 3420 Firmware vulnerabilities

2 CVEs affecting Korenix Jetwave 3420 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-39280, published 2022-02-06.

More from Korenix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-12504, published 2020-10-15. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE,…
• CVE-2021-39280, published 2022-02-06. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before…