{"id":"CVE-2023-5376","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-5376","generatedAt":"2026-10-28T02:15:18.084Z","title":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service.","description":"An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.","published":"2024-01-09T10:15:23.000Z","lastModified":"2026-06-17T06:48:28.000Z","status":"Modified","sourceIdentifier":"office@cyberdanube.com","cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-306","CWE-287"],"affected":["korenix/jetnet 5310g firmware","korenix/jetnet 4508 firmware","korenix/jetnet 4508i-w firmware","korenix/jetnet 4508-w firmware","korenix/jetnet 4508if-s firmware","korenix/jetnet 4508if-m firmware","korenix/jetnet 4508if-sw firmware","korenix/jetnet 4508if-mw firmware","korenix/jetnet 4508f-m firmware","korenix/jetnet 4508f-s firmware","korenix/jetnet 4508f-mw firmware","korenix/jetnet 4508f-sw firmware","korenix/jetnet 5620g-4c firmware","korenix/jetnet 5612gp-4f firmware","korenix/jetnet 5612g-4f firmware","korenix/jetnet 5728g-24p-ac-2dc-us firmware","korenix/jetnet 5728g-24p-ac-2dc-eu firmware","korenix/jetnet 6528gf-2ac-eu firmware","korenix/jetnet 6528gf-2ac-us firmware","korenix/jetnet 6528gf-2dc24 firmware","korenix/jetnet 6528gf-2dc48 firmware","korenix/jetnet 6528gf-ac-eu firmware","korenix/jetnet 6528gf-ac-us firmware","korenix/jetnet 6628xp-4f-us firmware","korenix/jetnet 6628x-4f-eu firmware","korenix/jetnet 6728g-24p-ac-2dc-us firmware","korenix/jetnet 6728g-24p-ac-2dc-eu firmware","korenix/jetnet 6828gf-2dc48 firmware","korenix/jetnet 6828gf-2dc24 firmware","korenix/jetnet 6828gf-ac-dc24-us firmware","korenix/jetnet 6828gf-2ac-us firmware","korenix/jetnet 6828gf-ac-us firmware","korenix/jetnet 6828gf-2ac-au firmware","korenix/jetnet 6828gf-ac-dc24-eu firmware","korenix/jetnet 6828gf-2ac-eu firmware","korenix/jetnet 6910g-m12 hvdc firmware","korenix/jetnet 7310g-v2 firmware","korenix/jetnet 7628xp-4f-us firmware","korenix/jetnet 7628xp-4f-eu firmware","korenix/jetnet 7628x-4f-us firmware","korenix/jetnet 7628x-4f-eu firmware","korenix/jetnet 7714g-m12 hvdc firmware"],"epss":{"score":0.01414,"percentile":0.72537,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"office@cyberdanube.com"},{"url":"http://seclists.org/fulldisclosure/2024/Jan/11","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"office@cyberdanube.com"},{"url":"https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/","tags":["Exploit","Third Party Advisory"],"source":"office@cyberdanube.com"},{"url":"https://www.beijerelectronics.com/en/support/Help___online?docId=69947","tags":["Vendor Advisory"],"source":"office@cyberdanube.com"},{"url":"http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2024/Jan/11","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.beijerelectronics.com/en/support/Help___online?docId=69947","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-5376","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}