CVE-2023-23296

published 2023-02-23

CVE-2023-23296: Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.

Priority P4 28 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
korenix	jetwave_2111_firmware	< 1.5	1.5
korenix	jetwave_2111l_firmware	< 1.6	1.6
korenix	jetwave_2114_firmware	< 1.4	1.4
korenix	jetwave_2211c_firmware	< 1.6	1.6
korenix	jetwave_2212g_firmware	—	—
korenix	jetwave_2212s_firmware	—	—
korenix	jetwave_2212x_firmware	—	—
korenix	jetwave_2411_firmware	< 1.5	1.5
korenix	jetwave_2411l_firmware	< 1.6	1.6
korenix	jetwave_2414_firmware	< 1.4	1.4
korenix	jetwave_2424_firmware	< 1.3	1.3
korenix	jetwave_2460_firmware	< 1.6	1.6
korenix	jetwave_3220_v3_firmware	< 1.7	1.7
korenix	jetwave_3420_v3_firmware	< 1.7	1.7
korenix	jetwave_4221hp-e_firmware	<= 1.3.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-400