PT-2024-5662 · Korenix · Korenix Jetport 5601V3+1

S. Dietz + 1 · Published 2024-04-01 · Updated 2024-08-07 · CVE-2024-7395

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Korenix JetPort versions 1.2 and earlier Korenix JetPort 5601v3 versions through 1.2

Description The issue is related to weaknesses in the authentication procedure of the Korenix JetPort serial device server. It may allow a remote attacker to bypass existing security restrictions.

Recommendations For Korenix JetPort versions 1.2 and earlier, update to a version later than 1.2 to resolve the issue. For Korenix JetPort 5601v3 versions through 1.2, update to a version later than 1.2 to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2024-06375

CVE-2024-7395

Affected Products

Korenix Jetport

Korenix Jetport 5601V3

References · 8

• https://bdu.fstec.ru/vul/2024-06375 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7395 · Security Note
• https://t.me/cvedetector/2446 · Telegram Post
• https://cyberdanube.com/de/en-multiple-vulnerabilities-in-korenix-jetport · Note
• https://t.me/cybersecuritytechnologies/10944 · Telegram Post
• https://vicarius.io/vsociety/posts/exploiting-insufficient-authentication-in-korenix-jetport-cve-2024-7395 · Note
• https://vuldb.com/?id.273583 · Note
• http://seclists.org/fulldisclosure/2024/Aug/2 · Note