What’s Vulnerable › Vulnerabilities

CVE-2023-5347: Unauthenticated Firmware Upgrade

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-09 · updated 2026-06-17
• Weakness: CWE-327

Description

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

Affected products

• Korenix Jetnet 4508-W Firmware: 2.3
• Korenix Jetnet 4508 Firmware: 2.3
• Korenix Jetnet 4508F-M Firmware: 2.3
• Korenix Jetnet 4508F-Mw Firmware: 2.3
• Korenix Jetnet 4508F-S Firmware: 2.3
• Korenix Jetnet 4508F-Sw Firmware: 2.3
• Korenix Jetnet 4508I-W Firmware: 1.3
• Korenix Jetnet 4508If-M Firmware: 1.3
• Korenix Jetnet 4508If-Mw Firmware: 1.3
• Korenix Jetnet 4508If-S Firmware: 1.3
• Korenix Jetnet 4508If-Sw Firmware: 1.3
• Korenix Jetnet 5310G Firmware: 2.6
• Korenix Jetnet 5612G-4F Firmware: 1.2
• Korenix Jetnet 5612Gp-4F Firmware: 1.2
• Korenix Jetnet 5620G-4C Firmware: 1.1
• Korenix Jetnet 5728G-24P-Ac-2Dc-Eu Firmware: 2.1
• Korenix Jetnet 5728G-24P-Ac-2Dc-Us Firmware: 2.1
• Korenix Jetnet 6528Gf-2Ac-Eu Firmware: 1.0
• Korenix Jetnet 6528Gf-2Ac-Us Firmware: 1.0
• Korenix Jetnet 6528Gf-2Dc24 Firmware: 1.0
• Korenix Jetnet 6528Gf-2Dc48 Firmware: 1.0
• Korenix Jetnet 6528Gf-Ac-Eu Firmware: 1.0
• Korenix Jetnet 6528Gf-Ac-Us Firmware: 1.0
• Korenix Jetnet 6628X-4F-Eu Firmware: 1.0
• Korenix Jetnet 6628Xp-4F-Us Firmware: 1.1
• Korenix Jetnet 6728G-24P-Ac-2Dc-Eu Firmware: 1.1
• Korenix Jetnet 6728G-24P-Ac-2Dc-Us Firmware: 1.1
• Korenix Jetnet 6828Gf-2Ac-Au Firmware: 1.0
• Korenix Jetnet 6828Gf-2Ac-Eu Firmware: 1.0
• Korenix Jetnet 6828Gf-2Ac-Us Firmware: 1.0

References

• http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
• http://seclists.org/fulldisclosure/2024/Jan/11
• https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
• https://www.beijerelectronics.com/en/support/Help___online?docId=69947
• http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
• http://seclists.org/fulldisclosure/2024/Jan/11
• https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
• https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Get alerted when CVE-2023-5347 or the next vulnerability affects your stack