CVE-2023-23295

🗓️ 23 Feb 2023 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 63 Views🌐 WEB

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 Command Injection Vulnerabilit

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-23295	24 Feb 202303:18	–	circl
CNNVD	Korenix Technology Korenix JetWave 命令注入漏洞	23 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-23295	23 Feb 202300:00	–	cvelist
EUVD	EUVD-2023-27395	3 Oct 202520:07	–	euvd
ICS	Korenix Jetwave	10 Apr 202316:08	–	ics
NVD	CVE-2023-23295	23 Feb 202323:15	–	nvd
Prion	Command injection	23 Feb 202323:15	–	prion
Positive Technologies	PT-2023-18890 · Korenix · Korenix Jetwave 4200 Series +1	23 Feb 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-23295	23 May 202502:37	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2023-23295	9 Oct 202300:00	–	vulncheck_kev

NVD

Node

korenix jetwave_2212g_firmwareMatch1.3.t

AND

korenix jetwave_2212gMatch-

Node

korenix jetwave_2212x_firmwareMatch1.3.0

AND

korenix jetwave_2212xMatch-

Node

korenix jetwave_2212s_firmwareMatch1.3.0

AND

korenix jetwave_2212sMatch-

Node

korenix jetwave_2211c_firmwareRange<1.6

AND

korenix jetwave_2211cMatch-

Node

korenix jetwave_2411_firmwareRange<1.5

AND

korenix jetwave_2411Match-

Node

korenix jetwave_2111_firmwareRange<1.5

AND

korenix jetwave_2111Match-

Node

korenix jetwave_2411l_firmwareRange<1.6

AND

korenix jetwave_2411lMatch-

Node

korenix jetwave_2111l_firmwareRange<1.6

AND

korenix jetwave_2111lMatch-

Node

korenix jetwave_2414_firmwareRange<1.4

AND

korenix jetwave_2414Match-

Node

korenix jetwave_2114_firmwareRange<1.4

AND

korenix jetwave_2114Match-

Node

korenix jetwave_2424_firmwareRange<1.3

AND

korenix jetwave_2414Match-

Node

korenix jetwave_2460_firmwareRange<1.6

AND

korenix jetwave_2460Match-

Node

korenix jetwave_4221hp-e__firmwareRange≤1.3.0

AND

korenix jetwave_4221hp-eMatch-

Node

korenix jetwave_3220_v3__firmwareRange<1.7

AND

korenix jetwave_3220_v3Match-

Node

korenix jetwave_3420_v3__firmwareRange<1.7

AND

korenix jetwave_3420_v3Match-

Source	Link
cyberdanube	www.cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/

Parameter	Position	Path	Description	CWE
sysCmd	request body	/goform/formSysCmd	Command Injection via /goform/formSysCmd allowing modification of sysCmd parameter to execute commands as root	CWE-77

17 Mar 2025 19:15Current

9High risk

Vulners AI Score9

CVSS 3.18.8

EPSS0.02257

SSVC

In Wild

cve-2023-23295 korenix jetwave command injection vulnerability nvd