CVSS: 8.7EPSS: 0%CPEs: 1EXPL: 1CVE-2024-11303 – Path Traversal
https://notcve.org/view.php?id=CVE-2024-11303
The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601: through 1.2. La vulnerabilidad de ruta del directorio raíz a un directorio restringido ('Path Traversal') en Korenix JetPort 5601 permite Path Traversal. Este problema afecta a JetPort 5601: hasta 1.2. Korenix JetPort 5601 version 1.2 suffers from a path traversal vulnerability. • https://cyberdanube.com/en/en-st-polten-uas-path-traversal-in-korenix-jetport • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 0%CPEs: 5EXPL: 0CVE-2019-9725
https://notcve.org/view.php?id=CVE-2019-9725
The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting. El gestor web (también conocido como Commander) en Korenix JetPort, en dispositivos con las versiones 5601 y 5601f, tiene Cross-Site Scripting (XSS) persistente mediante el campo "Port Alias" en el ajuste "Serial". • https://medium.com/%40bertinjoseb/korenix-jetport-web-manager-persistent-xss-6cf7e2a38634 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •