Code injection

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31...

CVE-2021-39280

CVE-2021-39280 affects Korenix JetWave devices (2212X/S/G, 3220 V3, 3420 V3, 2311) with unauthenticated attack surface via /syscmd.asp. Authenticated users can execute arbitrary code as root due to the command-injection/CSRF vulnerabilities described in multiple sources. Affected firmware version...

CVE-2021-39280

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31...

PT-2022-10891

Name of the Vulnerable Software and Affected Versions Korenix JetWave 2212X versions 1.9.0 and earlier Korenix JetWave 2212S versions 1.9.0 and earlier Korenix JetWave 2212G versions 1.7 and earlier Korenix JetWave 3220 V3 versions 1.5.0 and earlier Korenix JetWave 3420 V3 versions 1.5.0 and...

CVE-2021-39280: Undefined Security Weakness

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31...

Korenix Technology JetWave CSRF / Command Injection / Missing Authentication Vulnerabilities

Korenix Technology JetWave products JetWave 2212X, JetWave 2212S, JetWave 2212G, JetWave 2311, and JetWave 3220 suffer from unauthenticated device administration, cross site request forgery, multiple command injection, and unauthenticated tftp action vulnerabilities...

Korenix Technology Korenix JetWave 安全漏洞

Korenix Technology Korenix JetWave is a series of wireless access points from Korenix Technology. A security vulnerability exists in Korenix JetWave that stems from the software's lack of authentication of user data. An authenticated user can execute arbitrary code via syscmd.asp...

Korenix Technology JetWave CSRF / Command Injection / Missing Authentication

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Critical Vulnerabilities product: Korenix Technology JetWave products: JetWave 2212X, JetWave 2212S, JetWave 2212G, JetWave 2311, JetWave 3220 vulnerable version...