Lucene search

CyberDanubeCVELIST:CVE-2023-5376

HistoryJan 09, 2024 - 9:44 a.m.

CVE-2023-5376 TFTP Without Authentication

2024-01-0909:44:18

CWE-287

CyberDanube

www.cve.org

cve-2023-5376

tftp

korenix jetnet

improper authentication

firmware version

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

62.1%

JSON

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "JetNet Series",
    "vendor": "Korenix",
    "versions": [
      {
        "status": "affected",
        "version": "firmware older than 2024/01"
      }
    ]
  }
]

References

packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

seclists.org/fulldisclosure/2024/Jan/11

cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

www.beijerelectronics.com/en/support/Help___online?docId=69947

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

62.1%

JSON

Related for CVELIST:CVE-2023-5376