An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 9.1 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| Secondary | 3.1 | 8.6 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html | office@cyberdanube.com | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2024/Jan/11 | office@cyberdanube.com | Exploit Mailing List Third Party Advisory |
| https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/ | office@cyberdanube.com | Exploit Third Party Advisory |
| https://www.beijerelectronics.com/en/support/Help___online?docId=69947 | office@cyberdanube.com | Vendor Advisory |