CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-23295
High (8.8) in korenix. EPSS 3.8% chance of exploitation in the next 30 days.
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.
Severity
- EPSS
- 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-77
- Published
- Modified
- Record from
- the NVD, synced
Affected
- korenix:jetwave_2111_firmware
- korenix:jetwave_2111l_firmware
- korenix:jetwave_2114_firmware
- korenix:jetwave_2211c_firmware
- korenix:jetwave_2212g_firmware
- korenix:jetwave_2212s_firmware
- korenix:jetwave_2212x_firmware
- korenix:jetwave_2411_firmware
- korenix:jetwave_2411l_firmware
- korenix:jetwave_2414_firmware
- korenix:jetwave_2424_firmware
- korenix:jetwave_2460_firmware
- korenix:jetwave_3220_v3__firmware
- korenix:jetwave_3420_v3__firmware
- korenix:jetwave_4221hp-e__firmware