CVEvulnerability

CVE-2017-14021

9.8 CRITICAL Published 2017-11-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-321, CWE-798

Description

A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.

Affected configurations

• korenix jetnet5018g firmware 1.4 • korenix jetnet5310g firmware 1.4a • korenix jetnet5428g-2g-2fx firmware 1.4 • korenix jetnet5628g firmware 1.4 • korenix jetnet5628g-r firmware 1.4 • korenix jetnet5728g-24p firmware 1.4 • korenix jetnet5828g firmware 1.1d • korenix jetnet6710g firmware 1.1 • korenix jetnet6710g-hvdc firmware 11e

Related

Weakness · CWE (2)

  • CWE-321 Use of Hard-coded Cryptographic Key weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References