CVE-2023-5347 Unauthenticated Firmware Upgrade
CriticalCVSS 9.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| korenix JetNet Series | = firmware older than 2024/01 | No fix listed |
| korenix jetnet 5310g firmware | = 2.6 | No fix listed |
| korenix jetnet 4508 firmware | = 2.3 | No fix listed |
| korenix jetnet 4508i-w firmware | = 1.3 | No fix listed |
| korenix jetnet 4508-w firmware | = 2.3 | No fix listed |
| korenix jetnet 4508if-s firmware | = 1.3 | No fix listed |
| korenix jetnet 4508if-m firmware | = 1.3 | No fix listed |
| korenix jetnet 4508if-sw firmware | = 1.3 | No fix listed |
| korenix jetnet 4508if-mw firmware | = 1.3 | No fix listed |
| korenix jetnet 4508f-m firmware | = 2.3 | No fix listed |
| korenix jetnet 4508f-s firmware | = 2.3 | No fix listed |
| korenix jetnet 4508f-mw firmware | = 2.3 | No fix listed |
| korenix jetnet 4508f-sw firmware | = 2.3 | No fix listed |
| korenix jetnet 5620g-4c firmware | = 1.1 | No fix listed |
| korenix jetnet 5612gp-4f firmware | = 1.2 | No fix listed |
| korenix jetnet 5612g-4f firmware | = 1.2 | No fix listed |
| korenix jetnet 5728g-24p-ac-2dc-us firmware | = 2.1 | No fix listed |
| korenix jetnet 5728g-24p-ac-2dc-eu firmware | = 2.1 | No fix listed |
| korenix jetnet 6528gf-2ac-eu firmware | = 1.0 | No fix listed |
| korenix jetnet 6528gf-2ac-us firmware | = 1.0 | No fix listed |
| korenix jetnet 6528gf-2dc24 firmware | = 1.0 | No fix listed |
| korenix jetnet 6528gf-2dc48 firmware | = 1.0 | No fix listed |
| korenix jetnet 6528gf-ac-eu firmware | = 1.0 | No fix listed |
| korenix jetnet 6528gf-ac-us firmware | = 1.0 | No fix listed |
| korenix jetnet 6628xp-4f-us firmware | = 1.1 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| korenix jetnet 6628x-4f-eu firmware | = 1.0 | No fix listed |
| korenix jetnet 6728g-24p-ac-2dc-us firmware | = 1.1 | No fix listed |
| korenix jetnet 6728g-24p-ac-2dc-eu firmware | = 1.1 | No fix listed |
| korenix jetnet 6828gf-2dc48 firmware | = 1.0 | No fix listed |
| korenix jetnet 6828gf-2dc24 firmware | = 1.0 | No fix listed |
| korenix jetnet 6828gf-ac-dc24-us firmware | = 1.0 | No fix listed |
| korenix jetnet 6828gf-2ac-us firmware | = 1.0 | No fix listed |
| korenix jetnet 6828gf-ac-us firmware | = 1.0 | No fix listed |
| korenix jetnet 6828gf-2ac-au firmware | = 1.0 | No fix listed |
| korenix jetnet 6828gf-ac-dc24-eu firmware | = 1.0 | No fix listed |
| korenix jetnet 6828gf-2ac-eu firmware | = 1.0 | No fix listed |
| korenix jetnet 6910g-m12 hvdc firmware | = 1.0 | No fix listed |
| korenix jetnet 7310g-v2 firmware | = 1.0 | No fix listed |
| korenix jetnet 7628xp-4f-us firmware | = 1.0 | No fix listed |
| korenix jetnet 7628xp-4f-us firmware | = 1.1 | No fix listed |
| korenix jetnet 7628xp-4f-eu firmware | = 1.0 | No fix listed |
| korenix jetnet 7628xp-4f-eu firmware | = 1.1 | No fix listed |
| korenix jetnet 7628x-4f-us firmware | = 1.0 | No fix listed |
| korenix jetnet 7628x-4f-eu firmware | = 1.0 | No fix listed |
| korenix jetnet 7714g-m12 hvdc firmware | = 1.0 | No fix listed |
References
- www.beijerelectronics.com vendor-advisory
- cyberdanube.com exploit third-party-advisory
- seclists.org exploit mailing-list third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry