Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-5347

Unauthenticated Firmware Upgrade

Description

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Korenix JetNet Series

Default version status: affected

  • firmware older than 2024/01affected

References