CVE-2023-5376

Exploit

EPSS 1.41%
Veröffentlicht 09.01.2024 10:15:22
Zuletzt bearbeitet 08.10.2025 10:15:34
Erkennungen
Login

TFTP Without Authentication

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 7

NVD 44 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Korenix ≫ Jetnet 5310g Firmware Version 2.6

Korenix ≫ Jetnet 5310g Version -

Korenix ≫ Jetnet 4508 Firmware Version 2.3

Korenix ≫ Jetnet 4508 Version -

Korenix ≫ Jetnet 4508i-w Firmware Version 1.3

Korenix ≫ Jetnet 4508i-w Version -

Korenix ≫ Jetnet 4508-w Firmware Version 2.3

Korenix ≫ Jetnet 4508-w Version -

Korenix ≫ Jetnet 4508if-s Firmware Version 1.3

Korenix ≫ Jetnet 4508if-s Version -

Korenix ≫ Jetnet 4508if-m Firmware Version 1.3

Korenix ≫ Jetnet 4508if-m Version -

Korenix ≫ Jetnet 4508if-sw Firmware Version 1.3

Korenix ≫ Jetnet 4508if-sw Version -

Korenix ≫ Jetnet 4508if-mw Firmware Version 1.3

Korenix ≫ Jetnet 4508if-mw Version -

Korenix ≫ Jetnet 4508f-m Firmware Version 2.3

Korenix ≫ Jetnet 4508f-m Version -

Korenix ≫ Jetnet 4508f-s Firmware Version 2.3

Korenix ≫ Jetnet 4508f-s Version -

Korenix ≫ Jetnet 4508f-mw Firmware Version 2.3

Korenix ≫ Jetnet 4508f-mw Version -

Korenix ≫ Jetnet 4508f-sw Firmware Version 2.3

Korenix ≫ Jetnet 4508f-sw Version -

Korenix ≫ Jetnet 5620g-4c Firmware Version 1.1

Korenix ≫ Jetnet 5620g-4c Version -

Korenix ≫ Jetnet 5612gp-4f Firmware Version 1.2

Korenix ≫ Jetnet 5612gp-4f Version -

Korenix ≫ Jetnet 5612g-4f Firmware Version 1.2

Korenix ≫ Jetnet 5612g-4f Version -

Korenix ≫ Jetnet 5728g-24p-ac-2dc-us Firmware Version 2.1

Korenix ≫ Jetnet 5728g-24p-ac-2dc-us Version -

Korenix ≫ Jetnet 5728g-24p-ac-2dc-eu Firmware Version 2.1

Korenix ≫ Jetnet 5728g-24p-ac-2dc-eu Version -

Korenix ≫ Jetnet 6528gf-2ac-eu Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2ac-eu Version -

Korenix ≫ Jetnet 6528gf-2ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2ac-us Version -

Korenix ≫ Jetnet 6528gf-2dc24 Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2dc24 Version -

Korenix ≫ Jetnet 6528gf-2dc48 Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-2dc48 Version -

Korenix ≫ Jetnet 6528gf-ac-eu Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-ac-eu Version -

Korenix ≫ Jetnet 6528gf-ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6528gf-ac-us Version -

Korenix ≫ Jetnet 6628xp-4f-us Firmware Version 1.1

Korenix ≫ Jetnet 6628xp-4f-us Version -

Korenix ≫ Jetnet 6628x-4f-eu Firmware Version 1.0

Korenix ≫ Jetnet 6628x-4f-eu Version -

Korenix ≫ Jetnet 6728g-24p-ac-2dc-us Firmware Version 1.1

Korenix ≫ Jetnet 6728g-24p-ac-2dc-us Version -

Korenix ≫ Jetnet 6728g-24p-ac-2dc-eu Firmware Version 1.1

Korenix ≫ Jetnet 6728g-24p-ac-2dc-eu Version -

Korenix ≫ Jetnet 6828gf-2dc48 Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2dc48 Version -

Korenix ≫ Jetnet 6828gf-2dc24 Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2dc24 Version -

Korenix ≫ Jetnet 6828gf-ac-dc24-us Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-ac-dc24-us Version -

Korenix ≫ Jetnet 6828gf-2ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2ac-us Version -

Korenix ≫ Jetnet 6828gf-ac-us Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-ac-us Version -

Korenix ≫ Jetnet 6828gf-2ac-au Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2ac-au Version -

Korenix ≫ Jetnet 6828gf-ac-dc24-eu Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-ac-dc24-eu Version -

Korenix ≫ Jetnet 6828gf-2ac-eu Firmware Version 1.0

Korenix ≫ Jetnet 6828gf-2ac-eu Version -

Korenix ≫ Jetnet 6910g-m12 Hvdc Firmware Version 1.0

Korenix ≫ Jetnet 6910g-m12 Hvdc Version -

Korenix ≫ Jetnet 7310g-v2 Firmware Version 1.0

Korenix ≫ Jetnet 7310g-v2 Version -

Korenix ≫ Jetnet 7628xp-4f-us Firmware Version 1.0

Korenix ≫ Jetnet 7628xp-4f-us Version -

Korenix ≫ Jetnet 7628xp-4f-us Firmware Version 1.1

Korenix ≫ Jetnet 7628xp-4f-us Version -

Korenix ≫ Jetnet 7628xp-4f-eu Firmware Version 1.0

Korenix ≫ Jetnet 7628xp-4f-eu Version -

Korenix ≫ Jetnet 7628xp-4f-eu Firmware Version 1.1

Korenix ≫ Jetnet 7628xp-4f-eu Version -

Korenix ≫ Jetnet 7628x-4f-us Firmware Version 1.0

Korenix ≫ Jetnet 7628x-4f-us Version -

Korenix ≫ Jetnet 7628x-4f-eu Firmware Version 1.0

Korenix ≫ Jetnet 7628x-4f-eu Version -

Korenix ≫ Jetnet 7714g-m12 Hvdc Firmware Version 1.0

Korenix ≫ Jetnet 7714g-m12 Hvdc Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.41%	0.692

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
office@cyberdanube.com	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

Third Party Advisory

Exploit

VDB Entry

http://seclists.org/fulldisclosure/2024/Jan/11

Third Party Advisory

Exploit

Mailing List

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

Third Party Advisory

Exploit

https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-5376

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-5376

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-5376

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-5376