Description
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.
References (4)
Core 4
Core References
Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/176550/Korenix-JetNet-Series-Unauthenticated-Access.html
Exploit, Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jan/11
Exploit, Third Party Advisory
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/
Scores
CVSS v3
8.6
EPSS
0.0141
EPSS Percentile
69.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-287
CWE-306
Status
published
Products (44)
korenix/jetnet_4508-w_firmware
2.3
korenix/jetnet_4508_firmware
2.3
korenix/jetnet_4508f-m_firmware
2.3
korenix/jetnet_4508f-mw_firmware
2.3
korenix/jetnet_4508f-s_firmware
2.3
korenix/jetnet_4508f-sw_firmware
2.3
korenix/jetnet_4508i-w_firmware
1.3
korenix/jetnet_4508if-m_firmware
1.3
korenix/jetnet_4508if-mw_firmware
1.3
korenix/jetnet_4508if-s_firmware
1.3
... and 34 more
Published
Jan 09, 2024
Tracked Since
Feb 18, 2026