VULNERABILITY INTELLIGENCE
CVE-2023-5347
CVSS score9.8 CRITICAL
EPSS probability1.34%
CISA KEVNot currently listed
Published2024-01-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.
Weakness classification
- CWE-327: Use of a Broken or Risky Cryptographic Algorithm
- CWE-347: Improper Verification of Cryptographic Signature
Primary references
- office@cyberdanube.com — Exploit, Third Party Advisory, VDB Entry
- office@cyberdanube.com — Exploit, Mailing List, Third Party Advisory
- office@cyberdanube.com — Exploit, Third Party Advisory
- office@cyberdanube.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory