CVE-2023-5347

🗓️ 09 Jan 2024 09:54:59Reported by CyberDanubeType

cve🔗 web.nvd.nist.gov👁 51 Views🌐 WEB

An Improper Verification of Cryptographic Signature vulnerability in Korenix JetNet Serie

Reporter	Title	Published	Views	Family All 12
0day.today	Korenix JetNet Series Unauthenticated Access Exploit	16 Jan 202400:00	–	zdt
Circl	CVE-2023-5347	16 Jan 202419:16	–	circl
CNNVD	Korenix JetNet 2024/01 Security Vulnerability	9 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-5347 Unauthenticated Firmware Upgrade	9 Jan 202409:54	–	cvelist
EUVD	EUVD-2023-57664	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5347	9 Jan 202410:15	–	nvd
Packet Storm	Korenix JetNet Series Unauthenticated Access	15 Jan 202400:00	–	packetstorm
Prion	Information disclosure	9 Jan 202410:15	–	prion
Positive Technologies	PT-2023-8634	31 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-5347	23 May 202505:07	–	redhatcve

NVD

Node

korenix jetnet_5310g_firmwareMatch2.6

AND

korenix jetnet_5310gMatch-

Node

korenix jetnet_4508_firmwareMatch2.3

AND

korenix jetnet_4508Match-

Node

korenix jetnet_4508i-w_firmwareMatch1.3

AND

korenix jetnet_4508i-wMatch-

Node

korenix jetnet_4508-w_firmwareMatch2.3

AND

korenix jetnet_4508-wMatch-

Node

korenix jetnet_4508if-s_firmwareMatch1.3

AND

korenix jetnet_4508if-sMatch-

Node

korenix jetnet_4508if-m_firmwareMatch1.3

AND

korenix jetnet_4508if-mMatch-

Node

korenix jetnet_4508if-sw_firmwareMatch1.3

AND

korenix jetnet_4508if-swMatch-

Node

korenix jetnet_4508if-mw_firmwareMatch1.3

AND

korenix jetnet_4508if-mwMatch-

Node

korenix jetnet_4508f-m_firmwareMatch2.3

AND

korenix jetnet_4508f-mMatch-

Node

korenix jetnet_4508f-s_firmwareMatch2.3

AND

korenix jetnet_4508f-sMatch-

Node

korenix jetnet_4508f-mw_firmwareMatch2.3

AND

korenix jetnet_4508f-mwMatch-

Node

korenix jetnet_4508f-sw_firmwareMatch2.3

AND

korenix jetnet_4508f-swMatch-

Node

korenix jetnet_5620g-4c_firmwareMatch1.1

AND

korenix jetnet_5620g-4cMatch-

Node

korenix jetnet_5612gp-4f_firmwareMatch1.2

AND

korenix jetnet_5612gp-4fMatch-

Node

korenix jetnet_5612g-4f_firmwareMatch1.2

AND

korenix jetnet_5612g-4fMatch-

Node

korenix jetnet_5728g-24p-ac-2dc-us_firmwareMatch2.1

AND

korenix jetnet_5728g-24p-ac-2dc-usMatch-

Node

korenix jetnet_5728g-24p-ac-2dc-eu_firmwareMatch2.1

AND

korenix jetnet_5728g-24p-ac-2dc-euMatch-

Node

korenix jetnet_6528gf-2ac-eu_firmwareMatch1.0

AND

korenix jetnet_6528gf-2ac-euMatch-

Node

korenix jetnet_6528gf-2ac-us_firmwareMatch1.0

AND

korenix jetnet_6528gf-2ac-usMatch-

Node

korenix jetnet_6528gf-2dc24_firmwareMatch1.0

AND

korenix jetnet_6528gf-2dc24Match-

Node

korenix jetnet_6528gf-2dc48_firmwareMatch1.0

AND

korenix jetnet_6528gf-2dc48Match-

Node

korenix jetnet_6528gf-ac-eu_firmwareMatch1.0

AND

korenix jetnet_6528gf-ac-euMatch-

Node

korenix jetnet_6528gf-ac-us_firmwareMatch1.0

AND

korenix jetnet_6528gf-ac-usMatch-

Node

korenix jetnet_6628xp-4f-us_firmwareMatch1.1

AND

korenix jetnet_6628xp-4f-usMatch-

Node

korenix jetnet_6628x-4f-eu_firmwareMatch1.0

AND

korenix jetnet_6628x-4f-euMatch-

Node

korenix jetnet_6728g-24p-ac-2dc-us_firmwareMatch1.1

AND

korenix jetnet_6728g-24p-ac-2dc-usMatch-

Node

korenix jetnet_6728g-24p-ac-2dc-eu_firmwareMatch1.1

AND

korenix jetnet_6728g-24p-ac-2dc-euMatch-

Node

korenix jetnet_6828gf-2dc48_firmwareMatch1.0

AND

korenix jetnet_6828gf-2dc48Match-

Node

korenix jetnet_6828gf-2dc24_firmwareMatch1.0

AND

korenix jetnet_6828gf-2dc24Match-

Node

korenix jetnet_6828gf-ac-dc24-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-dc24-usMatch-

Node

korenix jetnet_6828gf-2ac-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-usMatch-

Node

korenix jetnet_6828gf-ac-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-usMatch-

Node

korenix jetnet_6828gf-2ac-au_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-auMatch-

Node

korenix jetnet_6828gf-ac-dc24-eu_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-dc24-euMatch-

Node

korenix jetnet_6828gf-2ac-eu_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-euMatch-

Node

korenix jetnet_6910g-m12_hvdc_firmwareMatch1.0

AND

korenix jetnet_6910g-m12_hvdcMatch-

Node

korenix jetnet_7310g-v2_firmwareMatch1.0

AND

korenix jetnet_7310g-v2Match-

Node

korenix jetnet_7628xp-4f-us_firmwareMatch1.0

AND

korenix jetnet_7628xp-4f-usMatch-

Node

korenix jetnet_7628xp-4f-us_firmwareMatch1.1

AND

korenix jetnet_7628xp-4f-usMatch-

Node

korenix jetnet_7628xp-4f-eu_firmwareMatch1.0

AND

korenix jetnet_7628xp-4f-euMatch-

Node

korenix jetnet_7628xp-4f-eu_firmwareMatch1.1

AND

korenix jetnet_7628xp-4f-euMatch-

Node

korenix jetnet_7628x-4f-us_firmwareMatch1.0

AND

korenix jetnet_7628x-4f-usMatch-

Node

korenix jetnet_7628x-4f-eu_firmwareMatch1.0

AND

korenix jetnet_7628x-4f-euMatch-

Node

korenix jetnet_7714g-m12_hvdc_firmwareMatch1.0

AND

korenix jetnet_7714g-m12_hvdcMatch-

[
  {
    "defaultStatus": "affected",
    "product": "JetNet Series",
    "vendor": "Korenix",
    "versions": [
      {
        "status": "affected",
        "version": "firmware older than 2024/01"
      }
    ]
  }
]

Source	Link
cyberdanube	www.cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
seclists	www.seclists.org/fulldisclosure/2024/Jan/11
packetstormsecurity	www.packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
beijerelectronics	www.beijerelectronics.com/en/support/Help___online

Parameter	Position	Path	Description	CWE
firmware.bin	binary	/home/firmware.bin	Unauthenticated firmware upgrade via TFTP to the device, enabling replacement of the firmware image.	CWE-327, CWE-347
checksum offset 0x9bdc	binary	/bin/cmd-server2	Checksum manipulation during firmware upgrade process (repacked squashfs/metadata) that enables forging/upgrading firmware.	CWE-327, CWE-347
metadata	binary	/bin/cmd-server2	Checksum manipulation during firmware upgrade process (repacked squashfs/metadata) that enables forging/upgrading firmware.	CWE-327, CWE-347
firmware_parts	binary	/bin/cmd-server2	Checksum manipulation during firmware upgrade process (repacked squashfs/metadata) that enables forging/upgrading firmware.	CWE-327, CWE-347

08 Oct 2025 09:15Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.1 - 9.8

EPSS0.00173

SSVC