CVE-2023-23295
43Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 8.8epss 3.8%
from disclosure to weapon
Published on NVDFeb 23
VulnCheck+228d
exploitation probability
3.8%top 10% of all CVEs
observed exploitation
yesVulnCheck
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the sysCmd parameter in order to execute commands as root.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a