CVE:CVE-2023-23295
CNNVD:CNNVD-202302-1943
Korenix Technology Korenix JetWave是科洛理思（Korenix Technology）公司的一系列无线接入点。
Korenix Technology Korenix JetWave 4200 Series 1.3.0版本、JetWave 3000 Series 1.6.0版本存在安全漏洞。攻击者利用该漏洞通过修改sysCmd参数以root身份执行命令。
solution:Upgrade korenix jetwave_2212g_firmware to a higher version than 1.3.t,and avoid the version 1.3.t; Upgrade korenix jetwave_2212x_firmware to a higher version than 1.3.0,and avoid the version 1.3.0; Upgrade korenix jetwave_2212s_firmware to a higher version than 1.3.0,and avoid the version 1.3.0; Upgrade korenix jetwave_2211c_firmware to a higher version than 1.6,and avoid the version (,1.6); Upgrade korenix jetwave_2411_firmware to a higher version than 1.5,and avoid the version (,1.5); Upgrade korenix jetwave_2111_firmware to a higher version than 1.5,and avoid the version (,1.5); Upgrade korenix jetwave_2411l_firmware to a higher version than 1.6,and avoid the version (,1.6); Upgrade korenix jetwave_2111l_firmware to a higher version than 1.6,and avoid the version (,1.6); Upgrade korenix jetwave_2414_firmware to a higher version than 1.4,and avoid the version (,1.4); Upgrade korenix jetwave_2114_firmware to a higher version than 1.4,and avoid the version (,1.4); Upgrade korenix jetwave_2424_firmware to a higher version than 1.3,and avoid the version (,1.3); Upgrade korenix jetwave_2460_firmware to a higher version than 1.6,and avoid the version (,1.6); Upgrade korenix jetwave_4221hp-e__firmware to a higher version than 1.3.0,and avoid the version (,1.3.0]; Upgrade korenix jetwave_3220_v3__firmware to a higher version than 1.7,and avoid the version (,1.7); Upgrade korenix jetwave_3420_v3__firmware to a higher version than 1.7,and avoid the version (,1.7)