CVE:CVE-2021-39280
CNNVD:CNNVD-202202-387
Korenix Technology Korenix JetWave是Korenix Technology公司的一系列无线接入点。
Korenix JetWave存在安全漏洞，该漏洞源于软件对于用户的数据缺少验证。经过身份验证的用户可以通过syscmd.asp执行任意代码。
solution:Upgrade korenix jetwave_2212s_firmware to a higher version than 1.9.1,and avoid the version (,1.9.1); Upgrade korenix jetwave_2212g_firmware to a higher version than 1.8,and avoid the version (,1.8); Upgrade korenix jetwave_2311_firmware to a higher version than 1.2,and avoid the version (,1.2]; Upgrade korenix jetwave_3220_firmware to a higher version than 1.5.1,and avoid the version (,1.5.1); Upgrade korenix jetwave_3420_firmware to a higher version than 1.5.1,and avoid the version (,1.5.1); Upgrade korenix jetwave_2212x_firmware to a higher version than 1.9.1,and avoid the version (,1.9.1)