CVE-2023-5376 | TFTP Without Authentication

Exp

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

Published: 2024-01-09 Last update: 2025-10-08 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2023-5376 is rated High Exploit Risk (67.1/100): CVSS High severity, with medium exploitation likelihood (EPSS 0.27%). 3 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2023-5376

EDB-ID Source Kind Published Link
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2023-5376

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-03-06 0.21% 0.27% +0.06%
2 2026-01-18 0.35% 0.21% -0.14%
3 2025-11-21 — 0.35% —

Full EPSS history (17 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2023-5376

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
8.6 3.1 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:C)
Breaking this can reach past the original component and bite other resources—bigger blast radius.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:H)
They could widely tamper with or forge data—trust in the data is badly hurt.
Availability (A:N)
Service keeps running; no real outage angle.
 3.9 4.0 [email protected]
9.1 3.1 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:H)
Serious risk that confidential data gets exposed in a big way.
Integrity (I:H)
They could widely tamper with or forge data—trust in the data is badly hurt.
Availability (A:N)
Service keeps running; no real outage angle.
 3.9 5.2 [email protected]

Weakness enumeration for CVE-2023-5376

Affected software / configurations for CVE-2023-5376

Vendor Product Version Raw CPE
korenix jetnet_5310g_firmware 2.6 cpe:2.3:o:korenix:jetnet_5310g_firmware:2.6:*:*:*:*:*:*:*
korenix jetnet_4508_firmware 2.3 cpe:2.3:o:korenix:jetnet_4508_firmware:2.3:*:*:*:*:*:*:*
korenix jetnet_4508i-w_firmware 1.3 cpe:2.3:o:korenix:jetnet_4508i-w_firmware:1.3:*:*:*:*:*:*:*
korenix jetnet_4508-w_firmware 2.3 cpe:2.3:o:korenix:jetnet_4508-w_firmware:2.3:*:*:*:*:*:*:*
korenix jetnet_4508if-s_firmware 1.3 cpe:2.3:o:korenix:jetnet_4508if-s_firmware:1.3:*:*:*:*:*:*:*
korenix jetnet_4508if-m_firmware 1.3 cpe:2.3:o:korenix:jetnet_4508if-m_firmware:1.3:*:*:*:*:*:*:*
korenix jetnet_4508if-sw_firmware 1.3 cpe:2.3:o:korenix:jetnet_4508if-sw_firmware:1.3:*:*:*:*:*:*:*
korenix jetnet_4508if-mw_firmware 1.3 cpe:2.3:o:korenix:jetnet_4508if-mw_firmware:1.3:*:*:*:*:*:*:*
korenix jetnet_4508f-m_firmware 2.3 cpe:2.3:o:korenix:jetnet_4508f-m_firmware:2.3:*:*:*:*:*:*:*
korenix jetnet_4508f-s_firmware 2.3 cpe:2.3:o:korenix:jetnet_4508f-s_firmware:2.3:*:*:*:*:*:*:*
korenix jetnet_4508f-mw_firmware 2.3 cpe:2.3:o:korenix:jetnet_4508f-mw_firmware:2.3:*:*:*:*:*:*:*
korenix jetnet_4508f-sw_firmware 2.3 cpe:2.3:o:korenix:jetnet_4508f-sw_firmware:2.3:*:*:*:*:*:*:*
korenix jetnet_5620g-4c_firmware 1.1 cpe:2.3:o:korenix:jetnet_5620g-4c_firmware:1.1:*:*:*:*:*:*:*
korenix jetnet_5612gp-4f_firmware 1.2 cpe:2.3:o:korenix:jetnet_5612gp-4f_firmware:1.2:*:*:*:*:*:*:*
korenix jetnet_5612g-4f_firmware 1.2 cpe:2.3:o:korenix:jetnet_5612g-4f_firmware:1.2:*:*:*:*:*:*:*
korenix jetnet_5728g-24p-ac-2dc-us_firmware 2.1 cpe:2.3:o:korenix:jetnet_5728g-24p-ac-2dc-us_firmware:2.1:*:*:*:*:*:*:*
korenix jetnet_5728g-24p-ac-2dc-eu_firmware 2.1 cpe:2.3:o:korenix:jetnet_5728g-24p-ac-2dc-eu_firmware:2.1:*:*:*:*:*:*:*
korenix jetnet_6528gf-2ac-eu_firmware 1.0 cpe:2.3:o:korenix:jetnet_6528gf-2ac-eu_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6528gf-2ac-us_firmware 1.0 cpe:2.3:o:korenix:jetnet_6528gf-2ac-us_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6528gf-2dc24_firmware 1.0 cpe:2.3:o:korenix:jetnet_6528gf-2dc24_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6528gf-2dc48_firmware 1.0 cpe:2.3:o:korenix:jetnet_6528gf-2dc48_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6528gf-ac-eu_firmware 1.0 cpe:2.3:o:korenix:jetnet_6528gf-ac-eu_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6528gf-ac-us_firmware 1.0 cpe:2.3:o:korenix:jetnet_6528gf-ac-us_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6628xp-4f-us_firmware 1.1 cpe:2.3:o:korenix:jetnet_6628xp-4f-us_firmware:1.1:*:*:*:*:*:*:*
korenix jetnet_6628x-4f-eu_firmware 1.0 cpe:2.3:o:korenix:jetnet_6628x-4f-eu_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6728g-24p-ac-2dc-us_firmware 1.1 cpe:2.3:o:korenix:jetnet_6728g-24p-ac-2dc-us_firmware:1.1:*:*:*:*:*:*:*
korenix jetnet_6728g-24p-ac-2dc-eu_firmware 1.1 cpe:2.3:o:korenix:jetnet_6728g-24p-ac-2dc-eu_firmware:1.1:*:*:*:*:*:*:*
korenix jetnet_6828gf-2dc48_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-2dc48_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6828gf-2dc24_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-2dc24_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6828gf-ac-dc24-us_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-ac-dc24-us_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6828gf-2ac-us_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-2ac-us_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6828gf-ac-us_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-ac-us_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6828gf-2ac-au_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-2ac-au_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6828gf-ac-dc24-eu_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-ac-dc24-eu_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6828gf-2ac-eu_firmware 1.0 cpe:2.3:o:korenix:jetnet_6828gf-2ac-eu_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_6910g-m12_hvdc_firmware 1.0 cpe:2.3:o:korenix:jetnet_6910g-m12_hvdc_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_7310g-v2_firmware 1.0 cpe:2.3:o:korenix:jetnet_7310g-v2_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_7628xp-4f-us_firmware 1.0 cpe:2.3:o:korenix:jetnet_7628xp-4f-us_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_7628xp-4f-us_firmware 1.1 cpe:2.3:o:korenix:jetnet_7628xp-4f-us_firmware:1.1:*:*:*:*:*:*:*
korenix jetnet_7628xp-4f-eu_firmware 1.0 cpe:2.3:o:korenix:jetnet_7628xp-4f-eu_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_7628xp-4f-eu_firmware 1.1 cpe:2.3:o:korenix:jetnet_7628xp-4f-eu_firmware:1.1:*:*:*:*:*:*:*
korenix jetnet_7628x-4f-us_firmware 1.0 cpe:2.3:o:korenix:jetnet_7628x-4f-us_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_7628x-4f-eu_firmware 1.0 cpe:2.3:o:korenix:jetnet_7628x-4f-eu_firmware:1.0:*:*:*:*:*:*:*
korenix jetnet_7714g-m12_hvdc_firmware 1.0 cpe:2.3:o:korenix:jetnet_7714g-m12_hvdc_firmware:1.0:*:*:*:*:*:*:*

References for CVE-2023-5376

cvelogic Threat Intelligence