Korenix JetNet Use of Hard-Coded Credentials (CVE-2017-14027)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503219);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/04/25");

  script_cve_id("CVE-2017-14027");
  script_xref(name:"ICSA", value:"17-299-01");

  script_name(english:"Korenix JetNet Use of Hard-Coded Credentials (CVE-2017-14027)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A Use of Hard-coded Credentials issue was discovered in Korenix JetNet
JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX
version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4,
JetNet5728G-24P version 1.4, JetNet5828G version 1.1d,
JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. The
software uses undocumented hard-coded credentials that may allow an
attacker to gain remote access.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/101598");
  script_set_attribute(attribute:"see_also", value:"https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01");
  script_set_attribute(attribute:"solution", value:
"The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original
can be found at CISA.gov.

Korenix has produced new firmware that removes the undocumented hard-coded credentials from supported systems. The new
firmware is available for download at:

http://www.korenix.com/upload/doc/FW_JetNet5310G_V2.0.rar

Korenix recommends that affected users use the software support certificate replacement feature to change certificates
on affected devices.

Users can find customer support links for Korenix at: http://www.korenix-usa.com/contact-us.php");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2017-14027");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(798);

  script_set_attribute(attribute:"vuln_publication_date", value:"2017/11/01");
  script_set_attribute(attribute:"patch_publication_date", value:"2017/11/01");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/04/25");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:korenix:jetnet5628g-r_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:korenix:jetnet5728g-24p_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:korenix:jetnet5828g_firmware:1.1d");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5018g_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5310g_firmware:1.4a");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5428g-2g-2fx_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet5628g_firmware:1.4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet6710g-hvdc_firmware:11e");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:korenix:jetnet6710g_firmware:1.1");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Korenix");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Korenix');

var asset = tenable_ot::assets::get(vendor:'Korenix');

var vuln_cpes = {
    "cpe:/o:korenix:jetnet5018g_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet5310g_firmware:1.4a" :
        {"versionEndIncluding" : "1.4a", "versionStartIncluding" : "1.4a", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet5428g-2g-2fx_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet5628g_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/h:korenix:jetnet5628g-r_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/h:korenix:jetnet5728g-24p_firmware:1.4" :
        {"versionEndIncluding" : "1.4", "versionStartIncluding" : "1.4", "family" : "JetNet"},
    "cpe:/h:korenix:jetnet5828g_firmware:1.1d" :
        {"versionEndIncluding" : "1.1d", "versionStartIncluding" : "1.1d", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet6710g_firmware:1.1" :
        {"versionEndIncluding" : "1.1", "versionStartIncluding" : "1.1", "family" : "JetNet"},
    "cpe:/o:korenix:jetnet6710g-hvdc_firmware:11e" :
        {"versionEndIncluding" : "11e", "versionStartIncluding" : "11e", "family" : "JetNet"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);