CVE-2023-5376

🗓️ 09 Jan 2024 09:44:18Reported by CyberDanubeType

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01

Reporter	Title	Published	Views	Family All 14
0day.today	Korenix JetNet Series Unauthenticated Access Exploit	16 Jan 202400:00	–	zdt
BDU FSTEC	The vulnerability of the TFTP Server component of the Korenix microprogramming software for switches allows a hacker to circumvent existing security restrictions.	22 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-5376	16 Jan 202419:16	–	circl
CNNVD	Korenix JetNet Security Vulnerability	9 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-5376 TFTP Without Authentication	9 Jan 202409:44	–	cvelist
EUVD	EUVD-2023-57692	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5376	9 Jan 202410:15	–	nvd
OSV	CVE-2023-5376	9 Jan 202410:15	–	osv
Packet Storm	Korenix JetNet Series Unauthenticated Access	15 Jan 202400:00	–	packetstorm
Prion	Authentication flaw	9 Jan 202410:15	–	prion

NVD

Node

korenix jetnet_5310g_firmwareMatch2.6

AND

korenix jetnet_5310gMatch-

Node

korenix jetnet_4508_firmwareMatch2.3

AND

korenix jetnet_4508Match-

Node

korenix jetnet_4508i-w_firmwareMatch1.3

AND

korenix jetnet_4508i-wMatch-

Node

korenix jetnet_4508-w_firmwareMatch2.3

AND

korenix jetnet_4508-wMatch-

Node

korenix jetnet_4508if-s_firmwareMatch1.3

AND

korenix jetnet_4508if-sMatch-

Node

korenix jetnet_4508if-m_firmwareMatch1.3

AND

korenix jetnet_4508if-mMatch-

Node

korenix jetnet_4508if-sw_firmwareMatch1.3

AND

korenix jetnet_4508if-swMatch-

Node

korenix jetnet_4508if-mw_firmwareMatch1.3

AND

korenix jetnet_4508if-mwMatch-

Node

korenix jetnet_4508f-m_firmwareMatch2.3

AND

korenix jetnet_4508f-mMatch-

Node

korenix jetnet_4508f-s_firmwareMatch2.3

AND

korenix jetnet_4508f-sMatch-

Node

korenix jetnet_4508f-mw_firmwareMatch2.3

AND

korenix jetnet_4508f-mwMatch-

Node

korenix jetnet_4508f-sw_firmwareMatch2.3

AND

korenix jetnet_4508f-swMatch-

Node

korenix jetnet_5620g-4c_firmwareMatch1.1

AND

korenix jetnet_5620g-4cMatch-

Node

korenix jetnet_5612gp-4f_firmwareMatch1.2

AND

korenix jetnet_5612gp-4fMatch-

Node

korenix jetnet_5612g-4f_firmwareMatch1.2

AND

korenix jetnet_5612g-4fMatch-

Node

korenix jetnet_5728g-24p-ac-2dc-us_firmwareMatch2.1

AND

korenix jetnet_5728g-24p-ac-2dc-usMatch-

Node

korenix jetnet_5728g-24p-ac-2dc-eu_firmwareMatch2.1

AND

korenix jetnet_5728g-24p-ac-2dc-euMatch-

Node

korenix jetnet_6528gf-2ac-eu_firmwareMatch1.0

AND

korenix jetnet_6528gf-2ac-euMatch-

Node

korenix jetnet_6528gf-2ac-us_firmwareMatch1.0

AND

korenix jetnet_6528gf-2ac-usMatch-

Node

korenix jetnet_6528gf-2dc24_firmwareMatch1.0

AND

korenix jetnet_6528gf-2dc24Match-

Node

korenix jetnet_6528gf-2dc48_firmwareMatch1.0

AND

korenix jetnet_6528gf-2dc48Match-

Node

korenix jetnet_6528gf-ac-eu_firmwareMatch1.0

AND

korenix jetnet_6528gf-ac-euMatch-

Node

korenix jetnet_6528gf-ac-us_firmwareMatch1.0

AND

korenix jetnet_6528gf-ac-usMatch-

Node

korenix jetnet_6628xp-4f-us_firmwareMatch1.1

AND

korenix jetnet_6628xp-4f-usMatch-

Node

korenix jetnet_6628x-4f-eu_firmwareMatch1.0

AND

korenix jetnet_6628x-4f-euMatch-

Node

korenix jetnet_6728g-24p-ac-2dc-us_firmwareMatch1.1

AND

korenix jetnet_6728g-24p-ac-2dc-usMatch-

Node

korenix jetnet_6728g-24p-ac-2dc-eu_firmwareMatch1.1

AND

korenix jetnet_6728g-24p-ac-2dc-euMatch-

Node

korenix jetnet_6828gf-2dc48_firmwareMatch1.0

AND

korenix jetnet_6828gf-2dc48Match-

Node

korenix jetnet_6828gf-2dc24_firmwareMatch1.0

AND

korenix jetnet_6828gf-2dc24Match-

Node

korenix jetnet_6828gf-ac-dc24-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-dc24-usMatch-

Node

korenix jetnet_6828gf-2ac-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-usMatch-

Node

korenix jetnet_6828gf-ac-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-usMatch-

Node

korenix jetnet_6828gf-2ac-au_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-auMatch-

Node

korenix jetnet_6828gf-ac-dc24-eu_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-dc24-euMatch-

Node

korenix jetnet_6828gf-2ac-eu_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-euMatch-

Node

korenix jetnet_6910g-m12_hvdc_firmwareMatch1.0

AND

korenix jetnet_6910g-m12_hvdcMatch-

Node

korenix jetnet_7310g-v2_firmwareMatch1.0

AND

korenix jetnet_7310g-v2Match-

Node

korenix jetnet_7628xp-4f-us_firmwareMatch1.0

AND

korenix jetnet_7628xp-4f-usMatch-

Node

korenix jetnet_7628xp-4f-us_firmwareMatch1.1

AND

korenix jetnet_7628xp-4f-usMatch-

Node

korenix jetnet_7628xp-4f-eu_firmwareMatch1.0

AND

korenix jetnet_7628xp-4f-euMatch-

Node

korenix jetnet_7628xp-4f-eu_firmwareMatch1.1

AND

korenix jetnet_7628xp-4f-euMatch-

Node

korenix jetnet_7628x-4f-us_firmwareMatch1.0

AND

korenix jetnet_7628x-4f-usMatch-

Node

korenix jetnet_7628x-4f-eu_firmwareMatch1.0

AND

korenix jetnet_7628x-4f-euMatch-

Node

korenix jetnet_7714g-m12_hvdc_firmwareMatch1.0

AND

korenix jetnet_7714g-m12_hvdcMatch-

[
  {
    "defaultStatus": "affected",
    "product": "JetNet Series",
    "vendor": "Korenix",
    "versions": [
      {
        "status": "affected",
        "version": "firmware older than 2024/01"
      }
    ]
  }
]

Source	Link
beijerelectronics	www.beijerelectronics.com/en/support/Help___online
packetstormsecurity	www.packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
cyberdanube	www.cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
seclists	www.seclists.org/fulldisclosure/2024/Jan/11

Parameter	Position	Path	Description	CWE
/home/firmware.bin	path	/home/firmware.bin	TFTP without authentication allows uploading firmware to restricted path /home/firmware.bin	CWE-287, CWE-306

17 Jun 2026 06:48Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.6 - 9.1

EPSS0.01414

SSVC