Jetwave 2411l Firmware vulnerabilities

2 known vulnerabilities in Jetwave 2411l Firmware from Korenix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jetwave 2212g Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-23295Feb 23, 2023KorenixEPSS 3.83%

  Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.

• 8.8 High severity

  Jetwave 2212g Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-23294Feb 23, 2023KorenixEPSS 2.69%

  Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.