High severity8.8NVD Advisory· Published Feb 6, 2022· Updated Jun 17, 2026

CVE-2021-39280

Description

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Korenix/Jetwave 2212g Firmware
cpe:2.3:o:korenix:jetwave_2212g_firmware:*:*:*:*:*:*:*:*
Range: <1.8
Korenix/Jetwave 2212s Firmware
cpe:2.3:o:korenix:jetwave_2212s_firmware:*:*:*:*:*:*:*:*
Range: <1.9.1
Korenix/Jetwave 2212x Firmware
cpe:2.3:o:korenix:jetwave_2212x_firmware:*:*:*:*:*:*:*:*
Range: <1.9.1
Korenix/Jetwave 2311 Firmware
cpe:2.3:o:korenix:jetwave_2311_firmware:*:*:*:*:*:*:*:*
Range: <=1.2
Korenix/Jetwave 3220 Firmware
cpe:2.3:o:korenix:jetwave_3220_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1
Korenix/Jetwave 3420 Firmware
cpe:2.3:o:korenix:jetwave_3420_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1
Korenix/JetWavedescription
Korenix/2212Xllm-create
Range: <1.9.1
Korenix/2212Sllm-create
Range: <1.9.1
Korenix/JetWavellm-fuzzy
Range: <1.9.1, <1.8, <1.5.1, <=2022-01-31

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.htmlnvdThird Party AdvisoryVDB Entry
www.korenix.com/en/product/search.aspxnvdProductVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000