Code injection

2022-02-0621:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

CPENameOperatorVersion
jetwave_2212g_firmwarelt1.8
jetwave_2212s_firmwarelt1.9.1
jetwave_2212x_firmwarelt1.9.1
jetwave_2311_firmwarele1.2
jetwave_3220_firmwarelt1.5.1
jetwave_3420_firmwarelt1.5.1

Name	Operator	Version
jetwave_2212g_firmware	lt	1.8
jetwave_2212s_firmware	lt	1.9.1
jetwave_2212x_firmware	lt	1.9.1
jetwave_2311_firmware	le	1.2
jetwave_3220_firmware	lt	1.5.1
jetwave_3420_firmware	lt	1.5.1