CVEvulnerability

CVE-2023-5376

9.1 CRITICAL Published 2024-01-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-01-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-287, CWE-306

Description

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

Affected configurations

• korenix jetnet 5310g firmware 2.6 • korenix jetnet 4508 firmware 2.3 • korenix jetnet 4508i-w firmware 1.3 • korenix jetnet 4508-w firmware 2.3 • korenix jetnet 4508if-s firmware 1.3 • korenix jetnet 4508if-m firmware 1.3 • korenix jetnet 4508if-sw firmware 1.3 • korenix jetnet 4508if-mw firmware 1.3 • korenix jetnet 4508f-m firmware 2.3 • korenix jetnet 4508f-s firmware 2.3 • korenix jetnet 4508f-mw firmware 2.3 • korenix jetnet 4508f-sw firmware 2.3 • korenix jetnet 5620g-4c firmware 1.1 • korenix jetnet 5612gp-4f firmware 1.2 • korenix jetnet 5612g-4f firmware 1.2 • korenix jetnet 5728g-24p-ac-2dc-us firmware 2.1 • korenix jetnet 5728g-24p-ac-2dc-eu firmware 2.1 • korenix jetnet 6528gf-2ac-eu firmware 1.0 • korenix jetnet 6528gf-2ac-us firmware 1.0 • korenix jetnet 6528gf-2dc24 firmware 1.0 • korenix jetnet 6528gf-2dc48 firmware 1.0 • korenix jetnet 6528gf-ac-eu firmware 1.0 • korenix jetnet 6528gf-ac-us firmware 1.0 • korenix jetnet 6628xp-4f-us firmware 1.1 • korenix jetnet 6628x-4f-eu firmware 1.0 • korenix jetnet 6728g-24p-ac-2dc-us firmware 1.1 • korenix jetnet 6728g-24p-ac-2dc-eu firmware 1.1 • korenix jetnet 6828gf-2dc48 firmware 1.0 • korenix jetnet 6828gf-2dc24 firmware 1.0 • korenix jetnet 6828gf-ac-dc24-us firmware 1.0 • korenix jetnet 6828gf-2ac-us firmware 1.0 • korenix jetnet 6828gf-ac-us firmware 1.0 • korenix jetnet 6828gf-2ac-au firmware 1.0 • korenix jetnet 6828gf-ac-dc24-eu firmware 1.0 • korenix jetnet 6828gf-2ac-eu firmware 1.0 • korenix jetnet 6910g-m12 hvdc firmware 1.0 • korenix jetnet 7310g-v2 firmware 1.0 • korenix jetnet 7628xp-4f-us firmware 1.0 • korenix jetnet 7628xp-4f-us firmware 1.1 • korenix jetnet 7628xp-4f-eu firmware 1.0 • korenix jetnet 7628xp-4f-eu firmware 1.1 • korenix jetnet 7628x-4f-us firmware 1.0 • korenix jetnet 7628x-4f-eu firmware 1.0 • korenix jetnet 7714g-m12 hvdc firmware 1.0

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References