PT-2024-1168 · Korenix · Korenix Jetnet

S. Dietz + 1 · Published 2024-01-09 · Updated 2025-10-08 · CVE-2023-5376

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Korenix JetNet devices versions prior to 2024/01

Description The issue is related to an Improper Authentication vulnerability in the TFTP Server component of Korenix JetNet devices. This vulnerability can be exploited by a remote attacker to bypass existing security restrictions, allowing abuse of the TFTP service.

Recommendations For Korenix JetNet devices older than firmware version 2024/01, update the firmware to version 2024/01 or later to resolve the issue. As a temporary workaround, consider restricting access to the TFTP service until a patch is applied.

Exploit

Fix

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

BDU:2024-00494

CVE-2023-5376

Affected Products

Korenix Jetnet

References · 20

• 🔥 https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series · Exploit
• 🔥 http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2024/Jan/11 · Exploit
• https://beijerelectronics.com/en/support/Help___online?docId=69947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5376 · Security Note
• https://bdu.fstec.ru/vul/2024-00494 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5376 · Vendor Advisory
• https://t.me/cveNotify/137780 · Telegram Post
• https://t.me/cvenotify/67476 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1744682634523898059 · Twitter Post
• https://twitter.com/CVEnew/status/1744658425823563908 · Twitter Post
• https://twitter.com/CCBalert/status/1746928088993214704 · Twitter Post
• https://t.me/cvenotify/67744 · Telegram Post
• https://t.me/cybersecuritytechnologies/9800 · Telegram Post
• https://twitter.com/Esparta6108713/status/1747371895744565757 · Twitter Post