CVE-2021-39280

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp

published February 6, 2022

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02313 · 83.3th percentile
Published
2022-02-06T20:47Z
EPSS history
Timeline
  • 06 FEB 20:47Z
    Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp
    cvelistv5