CVE-2023-5376

PoC ×3—

CVSS 3.1

9.1 critical

EPSS

1%p71

Published

Jan 9, 2024 (Jan 9, 2024)

Modified

Jun 17, 2026

Description

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

Vendors: korenix
Products: jetnet 5310g firmware, jetnet 4508 firmware, jetnet 4508i-w firmware, jetnet 4508-w firmware, jetnet 4508if-s firmware, jetnet 4508if-m firmware, jetnet 4508if-sw firmware, jetnet 4508if-mw firmware, jetnet 4508f-m firmware, jetnet 4508f-s firmware, jetnet 4508f-mw firmware, jetnet 4508f-sw firmware
Weakness: CWE-306, CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.