CVE-2024-7397: Improper Neutralization of Special Elements used in a Command

Improper filering of special characters result in a command 'command injection' vulnerability in Korenix JetPort 5601v3.This issue affects JetPort 5601v3: through 1.2...

Korenix JetPort 5601 操作系统命令注入漏洞

The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in Korenix JetPort 5601 version 1.2 and earlier, which stems from an authentication bypass vulnerability that allows an attacker to access features on the device without specifying a...

Korenix JetPort 5601 操作系统命令注入漏洞

The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in Korenix JetPort 5601 version 1.2 and earlier, which stems from the lack of encryption of sensitive data in the resulting eavesdropping...

Korenix JetPort 5601 操作系统命令注入漏洞

The Korenix JetPort 5601 is an intelligent serial device server from Korenix. A security vulnerability exists in the Korenix JetPort 5601 version 1.2 and earlier, which is caused by command injection due to improper special character filtering...

PT-2024-5663

Name of the Vulnerable Software and Affected Versions Korenix JetPort 5601v3 versions 1.2 and earlier Description The issue is related to improper filtering of special characters, resulting in a command injection vulnerability. This vulnerability may allow a remote attacker to bypass existing...

PT-2024-5664 · Korenix · Korenix Jetport 5601V3

Name of the Vulnerable Software and Affected Versions: Korenix JetPort 5601v3 versions 1.2 and earlier Description: The issue is related to the missing encryption of sensitive data, which allows eavesdropping. This can be exploited by a remote attacker to bypass existing security restrictions...

PT-2024-5662 · Korenix · Korenix Jetport +1

Name of the Vulnerable Software and Affected Versions: Korenix JetPort versions 1.2 and earlier Korenix JetPort 5601v3 versions through 1.2 Description: The issue is related to weaknesses in the authentication procedure of the Korenix JetPort serial device server. It may allow a remote attacker t...

Korenix JetPort 5601V3 Backdoor Account Vulnerability

Korenix JetPort 5601V3 with firmware version 1.0 suffers from having default backdoor accounts. The vendor will not address the issue as they claim the secret cannot be cracked in a reasonable amount of time. ======================================================================= title: Backdoor...

Korenix JetPort 5601V3 Backdoor Account

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Backdoor account product: Korenix JetPort 5601V3 vulnerable version: Firmware version 1.0 fixed version: None CVE number: CVE-2020-12501 impact: High homepage:...

Design/Logic Flaw

The Web manager aka Commander on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting...

CVE-2019-9725

The Web manager aka Commander on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting...

CVE-2019-9725

The Web manager aka Commander on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting...

CVE-2019-9725

The CVE-2019-9725 entry describes a Persistent XSS flaw in the Web manager (Commander) of Korenix JetPort 5601 and 5601f devices, exploitable via the Port Alias field under Serial Setting. Affected component: Web UI; root cause: input in Port Alias not properly sanitized, enabling stored/reflecti...

PT-2019-19823

Name of the Vulnerable Software and Affected Versions Korenix JetPort versions 5601 and 5601f Description The issue concerns a Persistent XSS vulnerability in the Web manager also known as Commander of Korenix JetPort devices. This vulnerability is specifically found in the Port Alias field under...

CVE-2019-9725: Improper Neutralization of Input During Web Page Generation

The Web manager aka Commander on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting...

CVE-2012-4577

The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...

Hardcoded credentials

The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...

CVE-2012-4577

CVE-2012-4577 involves hard-coded root credentials (password) on the Linux firmware images of Korenix JetPort 5600 series and ORing Industrial DIN-Rail serial-device servers. The vulnerability enables remote administrative access via SSH, with CVSS v2 base score 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)....

CVE-2012-4577: Undefined Security Weakness

The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...

PT-2012-5485

Name of the Vulnerable Software and Affected Versions Korenix Jetport 5600 series affected versions not specified ORing Industrial DIN-Rail serial-device servers affected versions not specified Description The issue concerns a hardcoded password in the Linux firmware image. Specifically, the root...