{"id":"CVE-2023-5376","aliases":["EUVD-2023-57692","GHSA-4f22-7h3g-c989"],"status":"published","title":"TFTP Without Authentication","description":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01414,"percentile":0.72918,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-306"],"published":"2024-01-09T09:44:18Z","modified":"2026-06-17T06:48:27Z","products":[{"vendor":"korenix","product":"jetnet series"},{"vendor":"korenix","product":"jetnet_4508-w_firmware"},{"vendor":"korenix","product":"jetnet_4508_firmware"},{"vendor":"korenix","product":"jetnet_4508f-m_firmware"},{"vendor":"korenix","product":"jetnet_4508f-mw_firmware"},{"vendor":"korenix","product":"jetnet_4508f-s_firmware"},{"vendor":"korenix","product":"jetnet_4508f-sw_firmware"},{"vendor":"korenix","product":"jetnet_4508i-w_firmware"},{"vendor":"korenix","product":"jetnet_4508if-m_firmware"},{"vendor":"korenix","product":"jetnet_4508if-mw_firmware"},{"vendor":"korenix","product":"jetnet_4508if-s_firmware"},{"vendor":"korenix","product":"jetnet_4508if-sw_firmware"},{"vendor":"korenix","product":"jetnet_5310g_firmware"},{"vendor":"korenix","product":"jetnet_5612g-4f_firmware"},{"vendor":"korenix","product":"jetnet_5612gp-4f_firmware"},{"vendor":"korenix","product":"jetnet_5620g-4c_firmware"},{"vendor":"korenix","product":"jetnet_5728g-24p-ac-2dc-eu_firmware"},{"vendor":"korenix","product":"jetnet_5728g-24p-ac-2dc-us_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2ac-eu_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2dc24_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-2dc48_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-ac-eu_firmware"},{"vendor":"korenix","product":"jetnet_6528gf-ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6628x-4f-eu_firmware"},{"vendor":"korenix","product":"jetnet_6628xp-4f-us_firmware"},{"vendor":"korenix","product":"jetnet_6728g-24p-ac-2dc-eu_firmware"},{"vendor":"korenix","product":"jetnet_6728g-24p-ac-2dc-us_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2ac-au_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2ac-eu_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2dc24_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-2dc48_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-ac-dc24-eu_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-ac-dc24-us_firmware"},{"vendor":"korenix","product":"jetnet_6828gf-ac-us_firmware"},{"vendor":"korenix","product":"jetnet_6910g-m12_hvdc_firmware"},{"vendor":"korenix","product":"jetnet_7310g-v2_firmware"},{"vendor":"korenix","product":"jetnet_7628x-4f-eu_firmware"},{"vendor":"korenix","product":"jetnet_7628x-4f-us_firmware"},{"vendor":"korenix","product":"jetnet_7628xp-4f-eu_firmware"},{"vendor":"korenix","product":"jetnet_7628xp-4f-us_firmware"},{"vendor":"korenix","product":"jetnet_7714g-m12_hvdc_firmware"}],"references":[{"url":"https://www.beijerelectronics.com/en/support/Help___online?docId=69947","tags":["x_transferred","Vendor Advisory"]},{"url":"https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/11","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5376"},{"url":"https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series"},{"url":"https://github.com/advisories/GHSA-4f22-7h3g-c989"}],"sources":{"cve":[{"id":"CVE-2023-5376","title":"TFTP Without Authentication","description":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T09:44:18.108Z","modified":"2025-10-08T09:12:42.388Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-57692","description":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T09:44:18Z","modified":"2025-10-08T09:12:42Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T20:31:35.432127Z"}],"ghsa":[{"id":"GHSA-4f22-7h3g-c989","title":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service....","description":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T12:30:36Z","modified":"2025-10-08T12:31:32Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-287","CWE-306"],"updated_at":"2026-11-02T15:03:53.457984Z"}],"nvd":[{"id":"CVE-2023-5376","description":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.","status":"published","published":"2024-01-09T10:15:22.823Z","modified":"2026-06-17T06:48:27.587Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"}],"cwes":["CWE-306","CWE-287"],"updated_at":"2026-11-02T14:09:00.788714Z"}]}}