CVE-2021-39280
High
Description
Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.
SeverityHigh
CVSS8.8
Exploit probability—
ProductKorenix Jetwave 2212s Firmware
PublishedFeb 6, 2022
First seenFeb 6, 2022
How to fix
Update
- korenix jetwave_2212s_firmware1.9.1 or later
- korenix jetwave_2212g_firmware1.8 or later
- korenix jetwave_3220_firmware1.5.1 or later
- korenix jetwave_3420_firmware1.5.1 or later
- korenix jetwave_2212x_firmware1.9.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| korenix jetwave_2212s_firmware | v < 1.9.1 | 1.9.1 |
| korenix jetwave_2212g_firmware | v < 1.8 | 1.8 |
| korenix jetwave_2311_firmware | v ≤ 1.2 | — |
| korenix jetwave_3220_firmware | v < 1.5.1 | 1.5.1 |
| korenix jetwave_3420_firmware | v < 1.5.1 | 1.5.1 |
| korenix jetwave_2212x_firmware | v < 1.9.1 | 1.9.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.