CVE-2023-5376

🗓️ 09 Jan 2024 09:44:18Reported by CyberDanubeType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01

Reporter	Title	Published	Views	Family All 12
0day.today	Korenix JetNet Series Unauthenticated Access Exploit	16 Jan 202400:00	–	zdt
Circl	CVE-2023-5376	16 Jan 202419:16	–	circl
CNNVD	Korenix JetNet Security Vulnerability	9 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-5376 TFTP Without Authentication	9 Jan 202409:44	–	cvelist
EUVD	EUVD-2023-57692	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5376	9 Jan 202410:15	–	nvd
Packet Storm	Korenix JetNet Series Unauthenticated Access	15 Jan 202400:00	–	packetstorm
Prion	Authentication flaw	9 Jan 202410:15	–	prion
Positive Technologies	PT-2024-1168 · Korenix · Korenix Jetnet	9 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-5376	23 May 202505:06	–	redhatcve

NVD

Node

korenix jetnet_5310g_firmwareMatch2.6

AND

korenix jetnet_5310gMatch-

Node

korenix jetnet_4508_firmwareMatch2.3

AND

korenix jetnet_4508Match-

Node

korenix jetnet_4508i-w_firmwareMatch1.3

AND

korenix jetnet_4508i-wMatch-

Node

korenix jetnet_4508-w_firmwareMatch2.3

AND

korenix jetnet_4508-wMatch-

Node

korenix jetnet_4508if-s_firmwareMatch1.3

AND

korenix jetnet_4508if-sMatch-

Node

korenix jetnet_4508if-m_firmwareMatch1.3

AND

korenix jetnet_4508if-mMatch-

Node

korenix jetnet_4508if-sw_firmwareMatch1.3

AND

korenix jetnet_4508if-swMatch-

Node

korenix jetnet_4508if-mw_firmwareMatch1.3

AND

korenix jetnet_4508if-mwMatch-

Node

korenix jetnet_4508f-m_firmwareMatch2.3

AND

korenix jetnet_4508f-mMatch-

Node

korenix jetnet_4508f-s_firmwareMatch2.3

AND

korenix jetnet_4508f-sMatch-

Node

korenix jetnet_4508f-mw_firmwareMatch2.3

AND

korenix jetnet_4508f-mwMatch-

Node

korenix jetnet_4508f-sw_firmwareMatch2.3

AND

korenix jetnet_4508f-swMatch-

Node

korenix jetnet_5620g-4c_firmwareMatch1.1

AND

korenix jetnet_5620g-4cMatch-

Node

korenix jetnet_5612gp-4f_firmwareMatch1.2

AND

korenix jetnet_5612gp-4fMatch-

Node

korenix jetnet_5612g-4f_firmwareMatch1.2

AND

korenix jetnet_5612g-4fMatch-

Node

korenix jetnet_5728g-24p-ac-2dc-us_firmwareMatch2.1

AND

korenix jetnet_5728g-24p-ac-2dc-usMatch-

Node

korenix jetnet_5728g-24p-ac-2dc-eu_firmwareMatch2.1

AND

korenix jetnet_5728g-24p-ac-2dc-euMatch-

Node

korenix jetnet_6528gf-2ac-eu_firmwareMatch1.0

AND

korenix jetnet_6528gf-2ac-euMatch-

Node

korenix jetnet_6528gf-2ac-us_firmwareMatch1.0

AND

korenix jetnet_6528gf-2ac-usMatch-

Node

korenix jetnet_6528gf-2dc24_firmwareMatch1.0

AND

korenix jetnet_6528gf-2dc24Match-

Node

korenix jetnet_6528gf-2dc48_firmwareMatch1.0

AND

korenix jetnet_6528gf-2dc48Match-

Node

korenix jetnet_6528gf-ac-eu_firmwareMatch1.0

AND

korenix jetnet_6528gf-ac-euMatch-

Node

korenix jetnet_6528gf-ac-us_firmwareMatch1.0

AND

korenix jetnet_6528gf-ac-usMatch-

Node

korenix jetnet_6628xp-4f-us_firmwareMatch1.1

AND

korenix jetnet_6628xp-4f-usMatch-

Node

korenix jetnet_6628x-4f-eu_firmwareMatch1.0

AND

korenix jetnet_6628x-4f-euMatch-

Node

korenix jetnet_6728g-24p-ac-2dc-us_firmwareMatch1.1

AND

korenix jetnet_6728g-24p-ac-2dc-usMatch-

Node

korenix jetnet_6728g-24p-ac-2dc-eu_firmwareMatch1.1

AND

korenix jetnet_6728g-24p-ac-2dc-euMatch-

Node

korenix jetnet_6828gf-2dc48_firmwareMatch1.0

AND

korenix jetnet_6828gf-2dc48Match-

Node

korenix jetnet_6828gf-2dc24_firmwareMatch1.0

AND

korenix jetnet_6828gf-2dc24Match-

Node

korenix jetnet_6828gf-ac-dc24-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-dc24-usMatch-

Node

korenix jetnet_6828gf-2ac-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-usMatch-

Node

korenix jetnet_6828gf-ac-us_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-usMatch-

Node

korenix jetnet_6828gf-2ac-au_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-auMatch-

Node

korenix jetnet_6828gf-ac-dc24-eu_firmwareMatch1.0

AND

korenix jetnet_6828gf-ac-dc24-euMatch-

Node

korenix jetnet_6828gf-2ac-eu_firmwareMatch1.0

AND

korenix jetnet_6828gf-2ac-euMatch-

Node

korenix jetnet_6910g-m12_hvdc_firmwareMatch1.0

AND

korenix jetnet_6910g-m12_hvdcMatch-

Node

korenix jetnet_7310g-v2_firmwareMatch1.0

AND

korenix jetnet_7310g-v2Match-

Node

korenix jetnet_7628xp-4f-us_firmwareMatch1.0

AND

korenix jetnet_7628xp-4f-usMatch-

Node

korenix jetnet_7628xp-4f-us_firmwareMatch1.1

AND

korenix jetnet_7628xp-4f-usMatch-

Node

korenix jetnet_7628xp-4f-eu_firmwareMatch1.0

AND

korenix jetnet_7628xp-4f-euMatch-

Node

korenix jetnet_7628xp-4f-eu_firmwareMatch1.1

AND

korenix jetnet_7628xp-4f-euMatch-

Node

korenix jetnet_7628x-4f-us_firmwareMatch1.0

AND

korenix jetnet_7628x-4f-usMatch-

Node

korenix jetnet_7628x-4f-eu_firmwareMatch1.0

AND

korenix jetnet_7628x-4f-euMatch-

Node

korenix jetnet_7714g-m12_hvdc_firmwareMatch1.0

AND

korenix jetnet_7714g-m12_hvdcMatch-

[
  {
    "defaultStatus": "affected",
    "product": "JetNet Series",
    "vendor": "Korenix",
    "versions": [
      {
        "status": "affected",
        "version": "firmware older than 2024/01"
      }
    ]
  }
]

Source	Link
cyberdanube	www.cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
seclists	www.seclists.org/fulldisclosure/2024/Jan/11
packetstormsecurity	www.packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
beijerelectronics	www.beijerelectronics.com/en/support/Help___online

Parameter	Position	Path	Description	CWE
firmware.bin	path	/home/firmware.bin	TFTP without authentication allows uploading firmware to restricted /home path (CVE-2023-5376).	CWE-287, CWE-306

08 Oct 2025 10:15Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.6 - 9.1

EPSS0.00273

SSVC