Vulnerabilities

TI-2023-09176 CVE-2023-23296 · GHSA-3c7c-p4m9-gwhc

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial…

LOW 30

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00798 Published 2023-02-23 No fix listed CWE-400

TI-2023-09175 CVE-2023-23295 · GHSA-q74f-hvfr-7jqc

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command…

MEDIUM 47

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0383 Published 2023-02-23 No fix listed CWE-77

TI-2023-09174 CVE-2023-23294 · GHSA-592f-9p68-85hv

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command…

MEDIUM 45

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02692 Published 2023-02-23 No fix listed CWE-77

TI-2021-16659 CVE-2021-39280 · GHSA-3qv8-4pm7-wp59

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as…

MEDIUM 43

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02313 Published 2022-02-06 No fix listed

TI-2020-09999 CVE-2020-12504 · GHSA-66c6-xh5v-573q

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

MEDIUM 48

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0302 Published 2020-10-15 Fixed in 2.1.1, 3.1.1 +2 CWE-912

TI-2020-09998 CVE-2020-12503 · GHSA-vgv9-c2qw-673g

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

MEDIUM 52

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.22828 Published 2020-10-15 Fixed in 2.1.1, 3.1.1 +2 CWE-863

TI-2020-09996 CVE-2020-12501 · GHSA-xfr3-v749-v2r3

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

MEDIUM 48

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) use…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03338 Published 2020-10-15 Fixed in 2.1.1, 3.1.1 +2 CWE-798

Vulnerabilities

Filters

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial…

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command…

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command…

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as…

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products