← Vulnerability feed

Vulnerability record · CVE-2023-23296 · published 23 February 2023

CVE-2023-23296: Korenix jetwave 2212g firmware uncontrolled resource consumption vulnerability

Korenix · Jetwave 2212g Firmware

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.

6.5 CVSS 3.1 Medium EPSS 0.80% · top 44.8% CWE-400 · Uncontrolled resource consumption
6.5CVSS 3.1 base score
0.80%EPSS exploitation probability, 30 days
NoNot in CISA KEV
15Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

15 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/ ExploitThird Party Advisory
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetwave-series/ ExploitThird Party Advisory

Track CVE-2023-23296 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-12504Pepperl-fuchs es7510-xt firmware vulnerabilityImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES…EPSS 3.0%9.8CVE-2020-12501Pepperl-fuchs es7510-xt firmware hard-coded credentials vulnerabilityImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES…EPSS 3.3%8.8CVE-2023-23294Korenix jetwave 2212g firmware command injection vulnerabilityKorenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the file_name parameter t…EPSS 2.7%8.8CVE-2023-23295Korenix jetwave 2212g firmware command injection vulnerabilityKorenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. An attacker an modify the…EPSS 3.8%8.8CVE-2021-39280Korenix jetwave 2212s firmware vulnerabilityCertain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S b…EPSS 2.3%7.2CVE-2020-12503Pepperl-fuchs es7510-xt firmware incorrect authorization vulnerabilityImproper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES…EPSS 23%7.5CVE-2026-28318SolarWinds Serv-U unauthenticated POST request denial of serviceSolarWinds Serv-U crashes when it receives a specially crafted POST request using Content-Encoding: deflate, and the crash occurs without authenticat…KEVEPSS 1.9%analysed7.5CVE-2026-45498Microsoft Defender antimalware platform uncontrolled resource consumption DoSCVE-2026-45498 is a denial of service flaw in the Microsoft Defender antimalware platform, classified as uncontrolled resource consumption (CWE-400).…KEVEPSS 1.3%analysed

Source: NIST National Vulnerability Database (record CVE-2023-23296), CISA KEV, FIRST EPSS (scores of 2026-10-09). This page is refreshed as NVD updates the record.