Korenix

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Korenix records in CISA KEV

No Korenix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jetwave 2212g Firmware 7 records MEDIUM Jetwave 2212s Firmware 7 records MEDIUM Jetwave 2212x Firmware 7 records MEDIUM Jetwave 2311 Firmware 4 records MEDIUM Jetwave 3220 Firmware 4 records MEDIUM Jetwave 2111 Firmware 3 records MEDIUM Jetwave 2111l Firmware 3 records MEDIUM Jetwave 2114 Firmware 3 records MEDIUM

Records

7 records in Jetwave 2212s Firmware · all components

TI-2020-09998 CVE-2020-12503 · GHSA-vgv9-c2qw-673g

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

MEDIUM 52

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.22828 Published 2020-10-15 Fixed in 2.1.1, 3.1.1 +2 CWE-863

TI-2020-09999 CVE-2020-12504 · GHSA-66c6-xh5v-573q

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

MEDIUM 48

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0302 Published 2020-10-15 Fixed in 2.1.1, 3.1.1 +2 CWE-912

TI-2020-09996 CVE-2020-12501 · GHSA-xfr3-v749-v2r3

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

MEDIUM 48

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03338 Published 2020-10-15 Fixed in 2.1.1, 3.1.1 +2 CWE-798

TI-2023-09175 CVE-2023-23295 · GHSA-q74f-hvfr-7jqc

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command…

MEDIUM 47

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0383 Published 2023-02-23 No fix listed CWE-77

TI-2023-09174 CVE-2023-23294 · GHSA-592f-9p68-85hv

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command…

MEDIUM 45

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02692 Published 2023-02-23 No fix listed CWE-77

TI-2021-16659 CVE-2021-39280 · GHSA-3qv8-4pm7-wp59

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as…

MEDIUM 43

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02313 Published 2022-02-06 No fix listed

TI-2023-09176 CVE-2023-23296 · GHSA-3c7c-p4m9-gwhc

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial…

LOW 30

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00798 Published 2023-02-23 No fix listed CWE-400

Open these records in search →