{"id":"CVE-2023-5347","aliases":["EUVD-2023-57664","GHSA-3fr9-8m46-r2mm"],"status":"published","title":"Unauthenticated Firmware Upgrade","description":"An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.01342,"percentile":0.71507,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327","CWE-347"],"published":"2024-01-09T09:54:59Z","modified":"2026-06-17T06:48:23Z","products":[{"vendor":"korenix","product":"jetnet series"},{"vendor":"korenix","product":"jetnet_4508-w_firmware"},{"vendor":"korenix","product":"jetnet_4508_firmware"},{"vendor":"korenix","product":"jetnet_4508f-m_firmware"},{"vendor":"korenix","product":"jetnet_4508f-mw_firmware"},{"vendor":"korenix","product":"jetnet_4508f-s_firmware"},{"vendor":"korenix","product":"jetnet_4508f-sw_firmware"},{"vendor":"korenix","product":"jetnet_4508i-w_firmware"},{"vendor":"korenix","product":"jetnet_4508if-m_firmware"},{"vendor":"korenix","product":"jetnet_4508if-mw_firmware"},{"vendor":"korenix","product":"jetnet_4508if-s_firmware"},{"vendor":"korenix","product":"jetnet_4508if-sw_firmware"},{"vendor":"korenix","product":"jetnet_5310g_firmware"},{"vendor":"korenix","product":"jetnet_5612g-4f_firmware"},{"vendor":"korenix","product":"jetnet_5612gp-4f_firmware"},{"vendor":"korenix","product":"jetnet_5620g-4c_firmware"},{"vendor":"korenix","product":"jetnet_5728g-24p-ac-2dc-eu_firmware"},{"vendor":"korenix","product":"jetnet_5728g-24p-ac-2dc-us_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2ac-eu_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2dc24_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2dc48_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-ac-eu_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6628x-4f-eu_firmware"},{"vendor":"korenix","product":"jetnet_6628xp-4f-us_firmware"},{"vendor":"korenix","product":"jetnet_6728g-24p-ac-2dc-eu_firmware"},{"vendor":"korenix","product":"jetnet_6728g-24p-ac-2dc-us_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2ac-au_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2ac-eu_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2dc24_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2dc48_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-ac-dc24-eu_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-ac-dc24-us_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6910g-m12_hvdc_firmware"},{"vendor":"korenix","product":"jetnet_7310g-v2_firmware"},{"vendor":"korenix","product":"jetnet_7628x-4f-eu_firmware"},{"vendor":"korenix","product":"jetnet_7628x-4f-us_firmware"},{"vendor":"korenix","product":"jetnet_7628xp-4f-eu_firmware"},{"vendor":"korenix","product":"jetnet_7628xp-4f-us_firmware"},{"vendor":"korenix","product":"jetnet_7714g-m12_hvdc_firmware"}],"references":[{"url":"https://www.beijerelectronics.com/en/support/Help___online?docId=69947","tags":["x_transferred","Vendor Advisory"]},{"url":"https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/11","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5347"},{"url":"https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series"},{"url":"https://github.com/advisories/GHSA-3fr9-8m46-r2mm"}],"sources":{"cve":[{"id":"CVE-2023-5347","title":"Unauthenticated Firmware Upgrade","description":"An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T09:54:59.664Z","modified":"2025-10-08T09:10:00.84Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-347","CWE-327"],"updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57664","description":"An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T09:54:59Z","modified":"2025-10-08T09:10:00Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:31:35.432127Z"}],"ghsa":[{"id":"GHSA-3fr9-8m46-r2mm","title":"An Improper Verification of Cryptographic Signature vulnerability in the update process of...","description":"An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T12:30:36Z","modified":"2025-10-08T09:31:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-327","CWE-347"],"updated_at":"2026-11-02T15:03:52.918407Z"}],"nvd":[{"id":"CVE-2023-5347","description":"An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T10:15:22.523Z","modified":"2026-06-17T06:48:23.673Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-327","CWE-347"],"updated_at":"2026-11-02T14:09:00.788714Z"}]}}