ByteOS Network

Vulnerability Details :

CVE-2023-5347

Assigner Org ID-7d092a75-6bbd-48c6-a15a-0297458009bc

Published At-09 Jan, 2024 | 09:54

Updated At-08 Oct, 2025 | 09:10

Unauthenticated Firmware Upgrade

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:CyberDanube

Assigner Org ID:7d092a75-6bbd-48c6-a15a-0297458009bc

Published At:09 Jan, 2024 | 09:54

Updated At:08 Oct, 2025 | 09:10

▼CVE Numbering Authority (CNA)

Unauthenticated Firmware Upgrade

Affected Products

Vendor

Korenix

Product

JetNet Series

Default Status

affected

Versions

Affected

firmware older than 2024/01

Problem Types

Type	CWE ID	Description
CWE	CWE-347	CWE-347 Improper Verification of Cryptographic Signature
CWE	CWE-327	CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Type: CWE

CWE ID: CWE-347

Description: CWE-347 Improper Verification of Cryptographic Signature

Type: CWE

CWE ID: CWE-327

Description: CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Metrics

Version	Base score	Base severity	Vector
3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impacts

CAPEC ID	Description
CAPEC-558	CAPEC-558 Replace Trusted Executable
CAPEC-552	CAPEC-552 Install Rootkit
CAPEC-642	CAPEC-642 Replace Binaries

CAPEC ID: CAPEC-558

Description: CAPEC-558 Replace Trusted Executable

CAPEC ID: CAPEC-552

Description: CAPEC-552 Install Rootkit

CAPEC ID: CAPEC-642

Description: CAPEC-642 Replace Binaries

Workarounds

See: https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Credits

finder

S. Dietz (CyberDanube)

References

Hyperlink	Resource
https://www.beijerelectronics.com/en/support/Help___online?docId=69947	N/A
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/	N/A
http://seclists.org/fulldisclosure/2024/Jan/11	N/A
http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html	N/A

Hyperlink: https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Resource: N/A

Hyperlink: https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2024/Jan/11

Resource: N/A

Hyperlink: http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.beijerelectronics.com/en/support/Help___online?docId=69947	x_transferred
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/	x_transferred
http://seclists.org/fulldisclosure/2024/Jan/11	x_transferred
http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html	x_transferred

Hyperlink: https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Resource:

x_transferred

Hyperlink: https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

Resource:

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2024/Jan/11

Resource:

x_transferred

Hyperlink: http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:office@cyberdanube.com

Published At:09 Jan, 2024 | 10:15

Updated At:08 Oct, 2025 | 09:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CPE Matches

korenix>>jetnet_5310g_firmware>>2.6

cpe:2.3:o:korenix:jetnet_5310g_firmware:2.6:*:*:*:*:*:*:*

korenix>>jetnet_5310g>>-

cpe:2.3:h:korenix:jetnet_5310g:-:*:*:*:*:*:*:*

korenix>>jetnet_4508_firmware>>2.3

cpe:2.3:o:korenix:jetnet_4508_firmware:2.3:*:*:*:*:*:*:*

korenix>>jetnet_4508>>-

cpe:2.3:h:korenix:jetnet_4508:-:*:*:*:*:*:*:*

korenix>>jetnet_4508i-w_firmware>>1.3

cpe:2.3:o:korenix:jetnet_4508i-w_firmware:1.3:*:*:*:*:*:*:*

korenix>>jetnet_4508i-w>>-

cpe:2.3:h:korenix:jetnet_4508i-w:-:*:*:*:*:*:*:*

korenix>>jetnet_4508-w_firmware>>2.3

cpe:2.3:o:korenix:jetnet_4508-w_firmware:2.3:*:*:*:*:*:*:*

korenix>>jetnet_4508-w>>-

cpe:2.3:h:korenix:jetnet_4508-w:-:*:*:*:*:*:*:*

korenix>>jetnet_4508if-s_firmware>>1.3

cpe:2.3:o:korenix:jetnet_4508if-s_firmware:1.3:*:*:*:*:*:*:*

korenix>>jetnet_4508if-s>>-

cpe:2.3:h:korenix:jetnet_4508if-s:-:*:*:*:*:*:*:*

korenix>>jetnet_4508if-m_firmware>>1.3

cpe:2.3:o:korenix:jetnet_4508if-m_firmware:1.3:*:*:*:*:*:*:*

korenix>>jetnet_4508if-m>>-

cpe:2.3:h:korenix:jetnet_4508if-m:-:*:*:*:*:*:*:*

korenix>>jetnet_4508if-sw_firmware>>1.3

cpe:2.3:o:korenix:jetnet_4508if-sw_firmware:1.3:*:*:*:*:*:*:*

korenix>>jetnet_4508if-sw>>-

cpe:2.3:h:korenix:jetnet_4508if-sw:-:*:*:*:*:*:*:*

korenix>>jetnet_4508if-mw_firmware>>1.3

cpe:2.3:o:korenix:jetnet_4508if-mw_firmware:1.3:*:*:*:*:*:*:*

korenix>>jetnet_4508if-mw>>-

cpe:2.3:h:korenix:jetnet_4508if-mw:-:*:*:*:*:*:*:*

korenix>>jetnet_4508f-m_firmware>>2.3

cpe:2.3:o:korenix:jetnet_4508f-m_firmware:2.3:*:*:*:*:*:*:*

korenix>>jetnet_4508f-m>>-

cpe:2.3:h:korenix:jetnet_4508f-m:-:*:*:*:*:*:*:*

korenix>>jetnet_4508f-s_firmware>>2.3

cpe:2.3:o:korenix:jetnet_4508f-s_firmware:2.3:*:*:*:*:*:*:*

korenix>>jetnet_4508f-s>>-

cpe:2.3:h:korenix:jetnet_4508f-s:-:*:*:*:*:*:*:*

korenix>>jetnet_4508f-mw_firmware>>2.3

cpe:2.3:o:korenix:jetnet_4508f-mw_firmware:2.3:*:*:*:*:*:*:*

korenix>>jetnet_4508f-mw>>-

cpe:2.3:h:korenix:jetnet_4508f-mw:-:*:*:*:*:*:*:*

korenix>>jetnet_4508f-sw_firmware>>2.3

cpe:2.3:o:korenix:jetnet_4508f-sw_firmware:2.3:*:*:*:*:*:*:*

korenix>>jetnet_4508f-sw>>-

cpe:2.3:h:korenix:jetnet_4508f-sw:-:*:*:*:*:*:*:*

korenix>>jetnet_5620g-4c_firmware>>1.1

cpe:2.3:o:korenix:jetnet_5620g-4c_firmware:1.1:*:*:*:*:*:*:*

korenix>>jetnet_5620g-4c>>-

cpe:2.3:h:korenix:jetnet_5620g-4c:-:*:*:*:*:*:*:*

korenix>>jetnet_5612gp-4f_firmware>>1.2

cpe:2.3:o:korenix:jetnet_5612gp-4f_firmware:1.2:*:*:*:*:*:*:*

korenix>>jetnet_5612gp-4f>>-

cpe:2.3:h:korenix:jetnet_5612gp-4f:-:*:*:*:*:*:*:*

korenix>>jetnet_5612g-4f_firmware>>1.2

cpe:2.3:o:korenix:jetnet_5612g-4f_firmware:1.2:*:*:*:*:*:*:*

korenix>>jetnet_5612g-4f>>-

cpe:2.3:h:korenix:jetnet_5612g-4f:-:*:*:*:*:*:*:*

korenix>>jetnet_5728g-24p-ac-2dc-us_firmware>>2.1

cpe:2.3:o:korenix:jetnet_5728g-24p-ac-2dc-us_firmware:2.1:*:*:*:*:*:*:*

korenix>>jetnet_5728g-24p-ac-2dc-us>>-

cpe:2.3:h:korenix:jetnet_5728g-24p-ac-2dc-us:-:*:*:*:*:*:*:*

korenix>>jetnet_5728g-24p-ac-2dc-eu_firmware>>2.1

cpe:2.3:o:korenix:jetnet_5728g-24p-ac-2dc-eu_firmware:2.1:*:*:*:*:*:*:*

korenix>>jetnet_5728g-24p-ac-2dc-eu>>-

cpe:2.3:h:korenix:jetnet_5728g-24p-ac-2dc-eu:-:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2ac-eu_firmware>>1.0

cpe:2.3:o:korenix:jetnet_6528gf-2ac-eu_firmware:1.0:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2ac-eu>>-

cpe:2.3:h:korenix:jetnet_6528gf-2ac-eu:-:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2ac-us_firmware>>1.0

cpe:2.3:o:korenix:jetnet_6528gf-2ac-us_firmware:1.0:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2ac-us>>-

cpe:2.3:h:korenix:jetnet_6528gf-2ac-us:-:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2dc24_firmware>>1.0

cpe:2.3:o:korenix:jetnet_6528gf-2dc24_firmware:1.0:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2dc24>>-

cpe:2.3:h:korenix:jetnet_6528gf-2dc24:-:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2dc48_firmware>>1.0

cpe:2.3:o:korenix:jetnet_6528gf-2dc48_firmware:1.0:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-2dc48>>-

cpe:2.3:h:korenix:jetnet_6528gf-2dc48:-:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-ac-eu_firmware>>1.0

cpe:2.3:o:korenix:jetnet_6528gf-ac-eu_firmware:1.0:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-ac-eu>>-

cpe:2.3:h:korenix:jetnet_6528gf-ac-eu:-:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-ac-us_firmware>>1.0

cpe:2.3:o:korenix:jetnet_6528gf-ac-us_firmware:1.0:*:*:*:*:*:*:*

korenix>>jetnet_6528gf-ac-us>>-

cpe:2.3:h:korenix:jetnet_6528gf-ac-us:-:*:*:*:*:*:*:*

korenix>>jetnet_6628xp-4f-us_firmware>>1.1

cpe:2.3:o:korenix:jetnet_6628xp-4f-us_firmware:1.1:*:*:*:*:*:*:*

korenix>>jetnet_6628xp-4f-us>>-

cpe:2.3:h:korenix:jetnet_6628xp-4f-us:-:*:*:*:*:*:*:*

korenix>>jetnet_6628x-4f-eu_firmware>>1.0

cpe:2.3:o:korenix:jetnet_6628x-4f-eu_firmware:1.0:*:*:*:*:*:*:*

korenix>>jetnet_6628x-4f-eu>>-

cpe:2.3:h:korenix:jetnet_6628x-4f-eu:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-327	Secondary	office@cyberdanube.com
CWE-347	Secondary	office@cyberdanube.com
CWE-347	Primary	nvd@nist.gov

CWE ID: CWE-327

Type: Secondary

Source: office@cyberdanube.com

CWE ID: CWE-347

Type: Secondary

Source: office@cyberdanube.com

CWE ID: CWE-347

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html	office@cyberdanube.com	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2024/Jan/11	office@cyberdanube.com	Exploit Mailing List Third Party Advisory
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/	office@cyberdanube.com	Exploit Third Party Advisory
https://www.beijerelectronics.com/en/support/Help___online?docId=69947	office@cyberdanube.com	Vendor Advisory
http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2024/Jan/11	af854a3a-2127-422b-91ae-364da2661108	Exploit Mailing List Third Party Advisory
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory
https://www.beijerelectronics.com/en/support/Help___online?docId=69947	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

Source: office@cyberdanube.com

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: http://seclists.org/fulldisclosure/2024/Jan/11

Source: office@cyberdanube.com

Resource:

Exploit

Mailing List

Third Party Advisory

Hyperlink: https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

Source: office@cyberdanube.com

Resource:

Exploit

Third Party Advisory

Hyperlink: https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Source: office@cyberdanube.com

Resource:

Vendor Advisory

Hyperlink: http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: http://seclists.org/fulldisclosure/2024/Jan/11

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Mailing List

Third Party Advisory

Hyperlink: https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Third Party Advisory

Hyperlink: https://www.beijerelectronics.com/en/support/Help___online?docId=69947

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

CVE-2023-5347

Credits

Unauthenticated Firmware Upgrade

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs