Korenix vulnerabilities
We track 7 vulnerabilities in Korenix products across 60+ products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 18, 2024.
Latest Korenix vulnerabilities
- 8.7 High severity
JetPort 5601: Improper Limitation of a Pathname to a Restricted Directory
The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601: through 1.2.
- 9.3 Critical severity
JetPort 5601v3: Improper Neutralization of Special Elements used in a Command
Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2.
- 9.3 Critical severity
JetPort 5601v3: Improper Authentication
An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the device without specifying a password.This issue affects JetPort 5601v3: through 1.2.
- 9.1 Critical severity
JetNet Series: Improper Authentication
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.
- 9.1 Critical severity
JetNet Series: Improper Verification of Cryptographic Signature
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.
- 8.8 High severity
Jetwave 2212g Firmware: Improper Neutralization of Special Elements used in a Command
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.
- 8.8 High severity
Jetwave 2212g Firmware: Improper Neutralization of Special Elements used in a Command
Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.