high8.6
CVE-2023-5376
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service.
Impact
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Korenix | Jetnet 5310g Firmware | Version 2.6 |
| Korenix | Jetnet 4508 Firmware | Version 2.3 |
| Korenix | Jetnet 4508i-W Firmware | Version 1.3 |
| Korenix | Jetnet 4508-W Firmware | Version 2.3 |
| Korenix | Jetnet 4508if-S Firmware | Version 1.3 |
| Korenix | Jetnet 4508if-M Firmware | Version 1.3 |
| Korenix | Jetnet 4508if-Sw Firmware | Version 1.3 |
| Korenix | Jetnet 4508if-Mw Firmware | Version 1.3 |
| Korenix | Jetnet 4508f-M Firmware | Version 2.3 |
| Korenix | Jetnet 4508f-S Firmware | Version 2.3 |
| Korenix | Jetnet 4508f-Mw Firmware | Version 2.3 |
| Korenix | Jetnet 4508f-Sw Firmware | Version 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
- http://seclists.org/fulldisclosure/2024/Jan/11
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
- https://www.beijerelectronics.com/en/support/Help___online?docId=69947
- http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
- http://seclists.org/fulldisclosure/2024/Jan/11
- https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
- https://www.beijerelectronics.com/en/support/Help___online?docId=69947