A command injection vulnerability exists in Korenix JetPort 5601v3 versions through 1.2 due to improper filtering of special characters. This flaw allows an unauthenticated attacker to execute arbitrary commands on the affected device remotely. The vulnerability is critical with a CVSS 4.0 score of 9.3, indicating high impact on confidentiality, integrity, and availability.