Korenix JetPort 5601 路径遍历漏洞

The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in Korenix JetPort 5601 version 1.2 and earlier, which stems from vulnerability to path traversal attacks...

CVE-2024-11303: Improper Limitation of a Pathname to a Restricted Directory

The pathname of the root directory to a Restricted Directory 'Path Traversal' vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601: through 1.2...

The vulnerability of the industrial server for serial devices of Korenix JetPort, related to the lack of measures taken to clean data at the management level, allows attackers to circumvent existing security restrictions.

The vulnerability of the industrial server for serial devices of Korenix JetPort is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the industrial server for serial devices of Korenix JetPort lies in the absence of encrypted confidential data, which allows attackers to circumvent existing security restrictions.

The vulnerability of the industrial server for serial devices of Korenix JetPort lies in the absence of encrypted confidential data. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the industrial server for serial devices of Korenix JetPort, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.

The vulnerability of the industrial server for serial devices of Korenix JetPort is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Korenix JetPort Series 1.2 Command Injection / Insufficient Authentication

CyberDanube Security Research 20240805-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities in JetPort Series product| Korenix JetPort Series vulnerable version| 1.2 fixed version| None CVE number| CVE-2024-7395, CVE-2024-7396,...

CVE-2024-7397

Improper filering of special characters result in a command 'command injection' vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7395

An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the device without specifying a password.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7396

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7397 Unauthenticated Command Injection

Improper filering of special characters result in a command 'command injection' vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7397 Unauthenticated Command Injection

Improper filering of special characters result in a command 'command injection' vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7397

The CVE-2024-7397 entry concerns Korenix JetPort 5601v3 (affected through version 1.2) with an improper filtering of special characters that enables a command injection vulnerability. The issue is documented across multiple sources (NVD, CVE listings, Red Hat advisory, PacketStorm) and is describ...

CVE-2024-7396 Plaintext Communication

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7396

CVE-2024-7396 concerns Korenix JetPort 5601v3 (affected through version 1.2) with missing encryption of sensitive data, enabling eavesdropping. The issue is caused by lack of encryption in data transmission for JetPort 5601v3 and is reflected in multiple sources (NVD, Red Hat CVE entry, CVE list)...

CVE-2024-7396 Plaintext Communication

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7395 Insufficient Authentication

An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the device without specifying a password.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7395 Insufficient Authentication

An authentication bypass vulnerability in Korenix JetPort 5601v3 allows an attacker to access functionality on the device without specifying a password.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7395

CVE-2024-7395 describes an authentication bypass in Korenix JetPort 5601v3 (affected through version 1.2), allowing an attacker to access device functionality without a password. Multiple connected sources confirm the vulnerability impact on JetPort 5601v3 up to 1.2 and indicate a high-impact pro...

CVE-2024-7396: Missing Encryption of Sensitive Data

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2...

CVE-2024-7397: Improper Neutralization of Special Elements used in a Command

Improper filering of special characters result in a command 'command injection' vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2...