CVE-2023-5347

Unauthenticated Firmware Upgrade

State: Published
Severity: 9.8 Critical
Published: Jan 9, 2024
Updated: Oct 8, 2025
Reserved: Oct 3, 2023

Description

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CyberDanube

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Affected Products

Product	Versions
JetNet SeriesKorenix	firmware older than 2024/01Affected

References

https://www.beijerelectronics.com/en/support/Help___online?docId=69947
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
http://seclists.org/fulldisclosure/2024/Jan/11
http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.