critical9.8
CVE-2023-5347
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system in…
Impact
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Korenix | Jetnet 5310g Firmware | Version 2.6 |
| Korenix | Jetnet 4508 Firmware | Version 2.3 |
| Korenix | Jetnet 4508i-W Firmware | Version 1.3 |
| Korenix | Jetnet 4508-W Firmware | Version 2.3 |
| Korenix | Jetnet 4508if-S Firmware | Version 1.3 |
| Korenix | Jetnet 4508if-M Firmware | Version 1.3 |
| Korenix | Jetnet 4508if-Sw Firmware | Version 1.3 |
| Korenix | Jetnet 4508if-Mw Firmware | Version 1.3 |
| Korenix | Jetnet 4508f-M Firmware | Version 2.3 |
| Korenix | Jetnet 4508f-S Firmware | Version 2.3 |
| Korenix | Jetnet 4508f-Mw Firmware | Version 2.3 |
| Korenix | Jetnet 4508f-Sw Firmware | Version 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
- http://seclists.org/fulldisclosure/2024/Jan/11
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
- https://www.beijerelectronics.com/en/support/Help___online?docId=69947
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
- http://seclists.org/fulldisclosure/2024/Jan/11
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
- https://www.beijerelectronics.com/en/support/Help___online?docId=69947