10

CVE-2017-14021

A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Korenix ≫ Jetnet5018g Firmware Version 1.4
   Korenix ≫ Jetnet 5018g Version -
Korenix ≫ Jetnet5310g Firmware Version 1.4a
   Korenix ≫ Jetnet 5310g Version -
Korenix ≫ Jetnet5428g-2g-2fx Firmware Version 1.4
   Korenix ≫ Jetnet 5428g-2g-2fx Version -
Korenix ≫ Jetnet5628g Firmware Version 1.4
   Korenix ≫ Jetnet 5628g Version -
Korenix ≫ Jetnet5628g-r Firmware Version 1.4
   Korenix ≫ Jetnet 5628g-r Version -
Korenix ≫ Jetnet5728g-24p Firmware Version 1.4
   Korenix ≫ Jetnet 5728g-24p Version -
Korenix ≫ Jetnet5828g Firmware Version 1.1d
   Korenix ≫ Jetnet 5828g Version -
Korenix ≫ Jetnet6710g Firmware Version 1.1
   Korenix ≫ Jetnet 6710g Version -
Korenix ≫ Jetnet6710g-hvdc Firmware Version 11e
   Korenix ≫ Jetnet 6710g-hvdc Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.92% 0.773
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-321 Use of Hard-coded Cryptographic Key

The product uses a hard-coded, unchangeable cryptographic key.

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

http://www.securityfocus.com/bid/101598
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01
Third Party Advisory
US Government Resource