Skip to content
Fencer Vulns
high 8.8

CVE-2023-23295 json

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd.

published 2023-02-23 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-27395

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
3.8%
EPSS 3.8% chance of exploitation in 30 days, percentile 90%
public exploits
0
none known

Summary

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.

Patch / fix

  • korenix jetwave_2211c_firmware 1.6
  • korenix jetwave_2411_firmware 1.5
  • korenix jetwave_2111_firmware 1.5
  • korenix jetwave_2411l_firmware 1.6
  • korenix jetwave_2111l_firmware 1.6
  • korenix jetwave_2414_firmware 1.4
  • korenix jetwave_2114_firmware 1.4
  • korenix jetwave_2424_firmware 1.3
  • korenix jetwave_2460_firmware 1.6
  • korenix jetwave_3220_v3__firmware 1.7
  • korenix jetwave_3420_v3__firmware 1.7

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-096-04 updated cvss 8.8

Korenix Jetwave

  • Korenix JetWave 2211C < 1.6 Korenix JetWave 2212G 1.3.T Korenix JetWave 2212X/2112S 1.3.0 Korenix JetWave 2411/2111 < 1.5 Korenix JetWave 2411L/2111L < 1.6 Korenix JetWave 2414/2114 < 1.4
    +4 more products
    Korenix JetWave 2424 < 1.3 Korenix JetWave 2460 < 1.6 Korenix JetWave 3220/3420 V3 < 1.7 Korenix JetWave4221 HP-E <= 1.3.0
    affected: vendor fix korenix.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
19 mo ago

Exploit prediction

3.83% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • cyberdanube.com https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

Weakness
  • CWE-77 Improper Neutralization of Special Elements used in a Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.