CVEvulnerability
CVE-2023-5347
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2024-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-327, CWE-347
Description
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.
Affected configurations
• korenix jetnet 5310g firmware 2.6
• korenix jetnet 4508 firmware 2.3
• korenix jetnet 4508i-w firmware 1.3
• korenix jetnet 4508-w firmware 2.3
• korenix jetnet 4508if-s firmware 1.3
• korenix jetnet 4508if-m firmware 1.3
• korenix jetnet 4508if-sw firmware 1.3
• korenix jetnet 4508if-mw firmware 1.3
• korenix jetnet 4508f-m firmware 2.3
• korenix jetnet 4508f-s firmware 2.3
• korenix jetnet 4508f-mw firmware 2.3
• korenix jetnet 4508f-sw firmware 2.3
• korenix jetnet 5620g-4c firmware 1.1
• korenix jetnet 5612gp-4f firmware 1.2
• korenix jetnet 5612g-4f firmware 1.2
• korenix jetnet 5728g-24p-ac-2dc-us firmware 2.1
• korenix jetnet 5728g-24p-ac-2dc-eu firmware 2.1
• korenix jetnet 6528gf-2ac-eu firmware 1.0
• korenix jetnet 6528gf-2ac-us firmware 1.0
• korenix jetnet 6528gf-2dc24 firmware 1.0
• korenix jetnet 6528gf-2dc48 firmware 1.0
• korenix jetnet 6528gf-ac-eu firmware 1.0
• korenix jetnet 6528gf-ac-us firmware 1.0
• korenix jetnet 6628xp-4f-us firmware 1.1
• korenix jetnet 6628x-4f-eu firmware 1.0
• korenix jetnet 6728g-24p-ac-2dc-us firmware 1.1
• korenix jetnet 6728g-24p-ac-2dc-eu firmware 1.1
• korenix jetnet 6828gf-2dc48 firmware 1.0
• korenix jetnet 6828gf-2dc24 firmware 1.0
• korenix jetnet 6828gf-ac-dc24-us firmware 1.0
• korenix jetnet 6828gf-2ac-us firmware 1.0
• korenix jetnet 6828gf-ac-us firmware 1.0
• korenix jetnet 6828gf-2ac-au firmware 1.0
• korenix jetnet 6828gf-ac-dc24-eu firmware 1.0
• korenix jetnet 6828gf-2ac-eu firmware 1.0
• korenix jetnet 6910g-m12 hvdc firmware 1.0
• korenix jetnet 7310g-v2 firmware 1.0
• korenix jetnet 7628xp-4f-us firmware 1.0
• korenix jetnet 7628xp-4f-us firmware 1.1
• korenix jetnet 7628xp-4f-eu firmware 1.0
• korenix jetnet 7628xp-4f-eu firmware 1.1
• korenix jetnet 7628x-4f-us firmware 1.0
• korenix jetnet 7628x-4f-eu firmware 1.0
• korenix jetnet 7714g-m12 hvdc firmware 1.0
Related
References
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2024/Jan/11 Exploit, Mailing List, Third Party Advisory
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/ Exploit, Third Party Advisory
- https://www.beijerelectronics.com/en/support/Help___online?docId=69947 Vendor Advisory
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2024/Jan/11 Exploit, Mailing List, Third Party Advisory
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/ Exploit, Third Party Advisory
- https://www.beijerelectronics.com/en/support/Help___online?docId=69947 Vendor Advisory