CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2023-5376
Critical (9.1) in korenix. EPSS 1.4% chance of exploitation in the next 30 days.
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-287, CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- korenix:jetnet_4508-w_firmware
- korenix:jetnet_4508_firmware
- korenix:jetnet_4508f-m_firmware
- korenix:jetnet_4508f-mw_firmware
- korenix:jetnet_4508f-s_firmware
- korenix:jetnet_4508f-sw_firmware
- korenix:jetnet_4508i-w_firmware
- korenix:jetnet_4508if-m_firmware
- korenix:jetnet_4508if-mw_firmware
- korenix:jetnet_4508if-s_firmware
- korenix:jetnet_4508if-sw_firmware
- korenix:jetnet_5310g_firmware
- korenix:jetnet_5612g-4f_firmware
- korenix:jetnet_5612gp-4f_firmware
- korenix:jetnet_5620g-4c_firmware
- korenix:jetnet_5728g-24p-ac-2dc-eu_firmware
- korenix:jetnet_5728g-24p-ac-2dc-us_firmware
- korenix:jetnet_6528gf-2ac-eu_firmware
- korenix:jetnet_6528gf-2ac-us_firmware
- korenix:jetnet_6528gf-2dc24_firmware
- korenix:jetnet_6528gf-2dc48_firmware
- korenix:jetnet_6528gf-ac-eu_firmware
- korenix:jetnet_6528gf-ac-us_firmware
- korenix:jetnet_6628x-4f-eu_firmware
- korenix:jetnet_6628xp-4f-us_firmware
- korenix:jetnet_6728g-24p-ac-2dc-eu_firmware
- korenix:jetnet_6728g-24p-ac-2dc-us_firmware
- korenix:jetnet_6828gf-2ac-au_firmware
- korenix:jetnet_6828gf-2ac-eu_firmware
- korenix:jetnet_6828gf-2ac-us_firmware
- korenix:jetnet_6828gf-2dc24_firmware
- korenix:jetnet_6828gf-2dc48_firmware
- korenix:jetnet_6828gf-ac-dc24-eu_firmware
- korenix:jetnet_6828gf-ac-dc24-us_firmware
- korenix:jetnet_6828gf-ac-us_firmware
- korenix:jetnet_6910g-m12_hvdc_firmware
- korenix:jetnet_7310g-v2_firmware
- korenix:jetnet_7628x-4f-eu_firmware
- korenix:jetnet_7628x-4f-us_firmware
- korenix:jetnet_7628xp-4f-eu_firmware
- korenix:jetnet_7628xp-4f-us_firmware
- korenix:jetnet_7714g-m12_hvdc_firmware
References
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
- http://seclists.org/fulldisclosure/2024/Jan/11
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
- https://www.beijerelectronics.com/en/support/Help___online?docId=69947
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html