CVE-2023-5347 CRITICAL

CVE-2023-5347: Unauthenticated Firmware Upgrade

Vendor Korenix
Product JetNet Series
Weakness CWE-347
Published January 9, 2024
Last update October 8, 2025
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

Key dates

02Disclosure timeline

January 9, 2024 CVE published
October 8, 2025 Record updated