9.1

CVE-2023-5347

Exploit

EPSS 1.34%
Veröffentlicht 09.01.2024 10:15:22
Zuletzt bearbeitet 08.10.2025 09:15:32
Erkennungen
Login

Unauthenticated Firmware Upgrade

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 7

NVD 44 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Korenix ≫ Jetnet 5310g Firmware Version 2.6

Korenix ≫ Jetnet 5310g Version -

Korenix ≫ Jetnet 4508 Firmware Version 2.3

Korenix ≫ Jetnet 4508 Version -

Korenix ≫ Jetnet 4508i-w Firmware Version 1.3

Korenix ≫ Jetnet 4508i-w Version -

Korenix ≫ Jetnet 4508-w Firmware Version 2.3

Korenix ≫ Jetnet 4508-w Version -

Korenix ≫ Jetnet 4508if-s Firmware Version 1.3

Korenix ≫ Jetnet 4508if-s Version -

Korenix ≫ Jetnet 4508if-m Firmware Version 1.3

Korenix ≫ Jetnet 4508if-m Version -

Korenix ≫ Jetnet 4508if-sw Firmware Version 1.3

Korenix ≫ Jetnet 4508if-sw Version -

Korenix ≫ Jetnet 4508if-mw Firmware Version 1.3

Korenix ≫ Jetnet 4508if-mw Version -

Korenix ≫ Jetnet 4508f-m Firmware Version 2.3

Korenix ≫ Jetnet 4508f-m Version -

Korenix ≫ Jetnet 4508f-s Firmware Version 2.3

Korenix ≫ Jetnet 4508f-s Version -

Korenix ≫ Jetnet 4508f-mw Firmware Version 2.3

Korenix ≫ Jetnet 4508f-mw Version -

Korenix ≫ Jetnet 4508f-sw Firmware Version 2.3

Korenix ≫ Jetnet 4508f-sw Version -

Korenix ≫ Jetnet 5620g-4c Firmware Version 1.1

Korenix ≫ Jetnet 5620g-4c Version -

Korenix ≫ Jetnet 5612gp-4f Firmware Version 1.2

Korenix ≫ Jetnet 5612gp-4f Version -

Korenix ≫ Jetnet 5612g-4f Firmware Version 1.2

Korenix ≫ Jetnet 5612g-4f Version -

Korenix ≫ Jetnet 5728g-24p-ac-2dc-us Firmware Version 2.1

Korenix ≫ Jetnet 5728g-24p-ac-2dc-us Version -

Korenix ≫ Jetnet 5728g-24p-ac-2dc-eu Firmware Version 2.1

Korenix ≫ Jetnet 5728g-24p-ac-2dc-eu Version -

Korenix ≫ Jetnet 6528gf-2ac-eu Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2ac-eu Version -

Korenix ≫ Jetnet 6528gf-2ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2ac-us Version -

Korenix ≫ Jetnet 6528gf-2dc24 Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2dc24 Version -

Korenix ≫ Jetnet 6528gf-2dc48 Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2dc48 Version -

Korenix ≫ Jetnet 6528gf-ac-eu Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-ac-eu Version -

Korenix ≫ Jetnet 6528gf-ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-ac-us Version -

Korenix ≫ Jetnet 6628xp-4f-us Firmware Version 1.1

Korenix ≫ Jetnet 6628xp-4f-us Version -

Korenix ≫ Jetnet 6628x-4f-eu Firmware Version 1.0

Korenix ≫ Jetnet 6628x-4f-eu Version -

Korenix ≫ Jetnet 6728g-24p-ac-2dc-us Firmware Version 1.1

Korenix ≫ Jetnet 6728g-24p-ac-2dc-us Version -

Korenix ≫ Jetnet 6728g-24p-ac-2dc-eu Firmware Version 1.1

Korenix ≫ Jetnet 6728g-24p-ac-2dc-eu Version -

Korenix ≫ Jetnet 6828gf-2dc48 Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2dc48 Version -

Korenix ≫ Jetnet 6828gf-2dc24 Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2dc24 Version -

Korenix ≫ Jetnet 6828gf-ac-dc24-us Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-ac-dc24-us Version -

Korenix ≫ Jetnet 6828gf-2ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2ac-us Version -

Korenix ≫ Jetnet 6828gf-ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-ac-us Version -

Korenix ≫ Jetnet 6828gf-2ac-au Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2ac-au Version -

Korenix ≫ Jetnet 6828gf-ac-dc24-eu Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-ac-dc24-eu Version -

Korenix ≫ Jetnet 6828gf-2ac-eu Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2ac-eu Version -

Korenix ≫ Jetnet 6910g-m12 Hvdc Firmware Version 1.0

Korenix ≫ Jetnet 6910g-m12 Hvdc Version -

Korenix ≫ Jetnet 7310g-v2 Firmware Version 1.0

Korenix ≫ Jetnet 7310g-v2 Version -

Korenix ≫ Jetnet 7628xp-4f-us Firmware Version 1.0

Korenix ≫ Jetnet 7628xp-4f-us Version -

Korenix ≫ Jetnet 7628xp-4f-us Firmware Version 1.1

Korenix ≫ Jetnet 7628xp-4f-us Version -

Korenix ≫ Jetnet 7628xp-4f-eu Firmware Version 1.0

Korenix ≫ Jetnet 7628xp-4f-eu Version -

Korenix ≫ Jetnet 7628xp-4f-eu Firmware Version 1.1

Korenix ≫ Jetnet 7628xp-4f-eu Version -

Korenix ≫ Jetnet 7628x-4f-us Firmware Version 1.0

Korenix ≫ Jetnet 7628x-4f-us Version -

Korenix ≫ Jetnet 7628x-4f-eu Firmware Version 1.0

Korenix ≫ Jetnet 7628x-4f-eu Version -

Korenix ≫ Jetnet 7714g-m12 Hvdc Firmware Version 1.0

Korenix ≫ Jetnet 7714g-m12 Hvdc Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.34%	0.677

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
office@cyberdanube.com	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

Third Party Advisory

Exploit

VDB Entry

http://seclists.org/fulldisclosure/2024/Jan/11

Third Party Advisory

Exploit

Mailing List

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

Third Party Advisory

Exploit

https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-5347

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-5347

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-5347

EUVD