Medium severity · published Mar 12, 2019
CVE-2019-9725
The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting
6.1
CVSS
0.9%
EPSS
No
On KEV
Description
The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
J5
Jetport 5601 Firmware · Korenix
All versions, or not specified · source: NVD
J5
Jetport 5601f Firmware · Korenix
All versions, or not specified · source: NVD
JW
Jetport Web Manager · Korenix
All versions, or not specified · source: NVD