Korenix kayıtları
korenix üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
- CWE-798 Use of Hard-coded Credentials2
- CWE-287 Improper Authentication1
- CWE-306 Missing Authentication for Critical Function1
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-321 Use of Hard-coded Cryptographic Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2012-4577İstismar yok | The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers hakorenix · jetport · CWE-255 | Kritik10,0 | — | %3,6 | 21 Ağu 2012 |
40Planlayın | CVE-2020-12501İstismar yok | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productspepperl-fuchs · es7510-xt firmware · CWE-798 | Kritik9,8 | — | %3,3 | 15 Eki 2020 |
40Planlayın | CVE-2020-12504İstismar yok | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productspepperl-fuchs · es7510-xt firmware · CWE-912 | Kritik9,8 | — | %3,0 | 15 Eki 2020 |
40Planlayın | CVE-2017-14027İstismar yok | A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FXkorenix · jetnet5018g firmware · CWE-798 | Kritik9,8 | — | %2,8 | 31 Eki 2017 |
40Planlayın | CVE-2017-14021İstismar yok | A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-korenix · jetnet5018g firmware · CWE-321 | Kritik9,8 | — | %1,9 | 31 Eki 2017 |
37İzleyin | CVE-2024-7397İstismar yok | Unauthenticated Command Injectionkorenix · jetport 5601v3 · CWE-77 | Kritik9,3 | — | %1,3 | 5 Ağu 2024 |
37İzleyin | CVE-2024-7395İstismar yok | Insufficient Authenticationkorenix · jetport 5601v3 · CWE-287 | Kritik9,3 | — | %0,8 | 5 Ağu 2024 |
36İzleyin | CVE-2023-23295İstismar yok | Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd.korenix · jetwave 2212g firmware · CWE-77 | Yüksek8,8 | — | %3,8 | 23 Şub 2023 |
36İzleyin | CVE-2023-23294İstismar yok | Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection.korenix · jetwave 2212g firmware · CWE-77 | Yüksek8,8 | — | %2,6 | 23 Şub 2023 |
36İzleyin | CVE-2021-39280İstismar yok | Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp.korenix · jetwave 2212s firmware | Yüksek8,8 | — | %2,3 | 6 Şub 2022 |
36İzleyin | CVE-2023-5376İstismar yok | TFTP Without Authenticationkorenix · jetnet 5310g firmware · CWE-306 | Kritik9,1 | — | %1,4 | 9 Oca 2024 |
36İzleyin | CVE-2023-5347İstismar yok | Unauthenticated Firmware Upgradekorenix · jetnet 5310g firmware · CWE-327 | Kritik9,1 | — | %1,3 | 9 Oca 2024 |
35İzleyin | CVE-2020-12503İstismar yok | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productspepperl-fuchs · es7510-xt firmware · CWE-863 | Yüksek7,2 | — | %22,8 | 15 Eki 2020 |
35İzleyin | CVE-2024-11303Kavram kanıtı | The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 allows Path Traversal.korenix · jetport 5601 · CWE-22 | Yüksek8,7 | — | %1,7 | 18 Kas 2024 |
35İzleyin | CVE-2020-12502İstismar yok | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productspepperl-fuchs · es7510-xt firmware · CWE-352 | Yüksek8,8 | — | %1,0 | 15 Eki 2020 |
28İzleyin | CVE-2024-7396İstismar yok | Plaintext Communicationkorenix · jetport 5601v3 · CWE-311 | Yüksek7,1 | — | %0,2 | 5 Ağu 2024 |
26İzleyin | CVE-2023-23296İstismar yok | Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.korenix · jetwave 2212g firmware · CWE-400 | Orta6,5 | — | %0,7 | 23 Şub 2023 |
24İzleyin | CVE-2019-9725İstismar yok | The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.korenix · jetport web manager · CWE-79 | Orta6,1 | — | %0,8 | 12 Mar 2019 |
- CVE-2012-457741Planlayın
The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers ha
KritikCVSS 10,0İstismar yokEPSS %3korenix · jetport21 Ağu 2012
- CVE-2020-1250140Planlayın
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
KritikCVSS 9,8İstismar yokEPSS %3pepperl-fuchs · es7510-xt firmware15 Eki 2020
- CVE-2020-1250440Planlayın
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
KritikCVSS 9,8İstismar yokEPSS %3pepperl-fuchs · es7510-xt firmware15 Eki 2020
- CVE-2017-1402740Planlayın
A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX
KritikCVSS 9,8İstismar yokEPSS %2korenix · jetnet5018g firmware31 Eki 2017
- CVE-2017-1402140Planlayın
A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-
KritikCVSS 9,8İstismar yokEPSS %1korenix · jetnet5018g firmware31 Eki 2017
- CVE-2024-739737İzleyin
Unauthenticated Command Injection
KritikCVSS 9,3İstismar yokEPSS %1korenix · jetport 5601v35 Ağu 2024
- CVE-2024-739537İzleyin
Insufficient Authentication
KritikCVSS 9,3İstismar yokEPSS %0korenix · jetport 5601v35 Ağu 2024
- CVE-2023-2329536İzleyin
Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd.
YüksekCVSS 8,8İstismar yokEPSS %3korenix · jetwave 2212g firmware23 Şub 2023
- CVE-2023-2329436İzleyin
Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection.
YüksekCVSS 8,8İstismar yokEPSS %2korenix · jetwave 2212g firmware23 Şub 2023
- CVE-2021-3928036İzleyin
Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp.
YüksekCVSS 8,8İstismar yokEPSS %2korenix · jetwave 2212s firmware6 Şub 2022
- CVE-2023-537636İzleyin
TFTP Without Authentication
KritikCVSS 9,1İstismar yokEPSS %1korenix · jetnet 5310g firmware9 Oca 2024
- CVE-2023-534736İzleyin
Unauthenticated Firmware Upgrade
KritikCVSS 9,1İstismar yokEPSS %1korenix · jetnet 5310g firmware9 Oca 2024
- CVE-2020-1250335İzleyin
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
YüksekCVSS 7,2İstismar yokEPSS %22pepperl-fuchs · es7510-xt firmware15 Eki 2020
- CVE-2024-1130335İzleyin
The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 allows Path Traversal.
YüksekCVSS 8,7Kavram kanıtıEPSS %1korenix · jetport 560118 Kas 2024
- CVE-2020-1250235İzleyin
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
YüksekCVSS 8,8İstismar yokEPSS %1pepperl-fuchs · es7510-xt firmware15 Eki 2020
- CVE-2024-739628İzleyin
Plaintext Communication
YüksekCVSS 7,1İstismar yokEPSS %0korenix · jetport 5601v35 Ağu 2024
- CVE-2023-2329626İzleyin
Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.
OrtaCVSS 6,5İstismar yokEPSS %0korenix · jetwave 2212g firmware23 Şub 2023
- CVE-2019-972524İzleyin
The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.
OrtaCVSS 6,1İstismar yokEPSS %0korenix · jetport web manager12 Mar 2019