CVE-2023-5347: Korenix Jetnet 4508-W Firmware

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01.

Affected products

• Korenix Jetnet 4508-W Firmware: version 2.3 only
• Korenix Jetnet 4508 Firmware: version 2.3 only
• Korenix Jetnet 4508f-M Firmware: version 2.3 only
• Korenix Jetnet 4508f-Mw Firmware: version 2.3 only
• Korenix Jetnet 4508f-S Firmware: version 2.3 only
• Korenix Jetnet 4508f-Sw Firmware: version 2.3 only
• Korenix Jetnet 4508i-W Firmware: version 1.3 only
• Korenix Jetnet 4508if-M Firmware: version 1.3 only
• Korenix Jetnet 4508if-Mw Firmware: version 1.3 only
• Korenix Jetnet 4508if-S Firmware: version 1.3 only
• Korenix Jetnet 4508if-Sw Firmware: version 1.3 only
• Korenix Jetnet 5310g Firmware: version 2.6 only
• Korenix Jetnet 5612g-4f Firmware: version 1.2 only
• Korenix Jetnet 5612gp-4f Firmware: version 1.2 only
• Korenix Jetnet 5620g-4c Firmware: version 1.1 only
• Korenix Jetnet 5728g-24p-Ac-2dc-Eu Firmware: version 2.1 only
• Korenix Jetnet 5728g-24p-Ac-2dc-Us Firmware: version 2.1 only
• Korenix Jetnet 6528gf-2ac-Eu Firmware: version 1.0 only
• Korenix Jetnet 6528gf-2ac-Us Firmware: version 1.0 only
• Korenix Jetnet 6528gf-2dc24 Firmware: version 1.0 only
• Korenix Jetnet 6528gf-2dc48 Firmware: version 1.0 only
• Korenix Jetnet 6528gf-Ac-Eu Firmware: version 1.0 only
• Korenix Jetnet 6528gf-Ac-Us Firmware: version 1.0 only
• Korenix Jetnet 6628x-4f-Eu Firmware: version 1.0 only
• Korenix Jetnet 6628xp-4f-Us Firmware: version 1.1 only
• and 17 more

Published 2024-01-09. Last modified 2026-06-17.