CVE-2023-5347

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.34% chance of exploitation in the next 30 days, 69th percentile

Published

2024-01-09

Updated

2025-10-08

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.…
• http://seclists.org/fulldisclosure/2024/Jan/11
• https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/

References

• CVE Record
• NVD entry

Related

• CVE-2023-5345
• CVE-2023-5348
• CVE-2023-5344
• CVE-2023-5350
• CVE-2023-5343
• CVE-2023-5351