CVE-2023-23294

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection

published February 23, 2023

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter to execute commands as root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02692 · 85.8th percentile
Published
2023-02-23T00:00Z
EPSS history
Timeline
  • 23 FEB 00:00Z
    Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection
    cvelistv5