Korenix JetNet Use of Hard-Coded Cryptographic Key (CVE-2017-14021)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503218);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/04/25");

  script_cve_id("CVE-2017-14021");
  script_xref(name:"ICSA", value:"17-299-01");

  script_name(english:"Korenix JetNet Use of Hard-Coded Cryptographic Key (CVE-2017-14021)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A Use of Hard-coded Cryptographic Key issue was discovered in Korenix
JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a,
JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G
version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d,
JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An
attacker may gain access to hard-coded certificates and private keys
allowing the attacker to perform man-in-the-middle attacks.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/101598");
  script_set_attribute(attribute:"see_also", value:"https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01");
  script_set_attribute(attribute:"solution", value:
"The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original
can be found at CISA.gov.

Korenix has produced new firmware that removes the undocumented hard-coded credentials from supported systems. The new
firmware is available for download at:

http://www.korenix.com/upload/doc/FW_JetNet5310G_V2.0.rar

Korenix recommends that affected users use the software support certificate replacement feature to change certificates
on affected devices.

Users can find customer support links for Korenix at: http://www.korenix-usa.com/contact-us.php");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2017-14021");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(321);

  script_set_attribute(attribute:"vuln_publication_date", value:"2017/11/01");
  script_set_attribute(attribute:"patch_publication_date", value:"2017/11/01");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/04/25");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:korenix:jetnet5628g-r_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:korenix:jetnet5728g-24p_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:korenix:jetnet5828g_firmware:1.1d");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5018g_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5310g_firmware:1.4a");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5428g-2g-2fx_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5628g_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet6710g-hvdc_firmware:11e");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet6710g_firmware:1.1");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Korenix");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Korenix');

var asset = tenable_ot::assets::get(vendor:'Korenix');

var vuln_cpes = {
    "cpe:/o:korenix:jetnet5018g_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet5310g_firmware:1.4a" :
        {"versionEndIncluding" : "1.4a", "versionStartIncluding" : "1.4a", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet5428g-2g-2fx_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet5628g_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/h:korenix:jetnet5628g-r_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/h:korenix:jetnet5728g-24p_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/h:korenix:jetnet5828g_firmware:1.1d" :
        {"versionEndIncluding" : "1.1d", "versionStartIncluding" : "1.1d", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet6710g_firmware:1.1" :
        {"versionEndIncluding" : "1.1", "versionStartIncluding" : "1.1", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet6710g-hvdc_firmware:11e" :
        {"versionEndIncluding" : "11e", "versionStartIncluding" : "11e", "family" : "JetNet"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);