CVE-2023-5347

Katalog CVE

CVSS 9.1 · Critical EPSS 1,3%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada korenix jetnet 5310g firmware, korenix jetnet 4508 firmware +40 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

Rincian

Terbit di NVD

9 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-347: Improper Verification of Cryptographic Signature

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.beijerelectronics.com/en/support/Help___online?docId=69947 advisory vendor
• http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html exploit · advisory pihak ketiga · vdb entry
• http://seclists.org/fulldisclosure/2024/Jan/11 exploit · mailing list · advisory pihak ketiga
• https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/ exploit · advisory pihak ketiga