What is the CVSS score of CVE-2023-5376?

CVE-2023-5376 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N. EPSS exploitation probability: 0.3%.

Which versions of Jetnet 5310G Firmware are affected by CVE-2023-5376?

Organizations using An Improper Authentication vulnerability in Korenix JetNet TFTP face significant risk from CVE-2023-5376, a missing authentication vulnerability rated CVSS 8.6.

Is there a public PoC exploit available for CVE-2023-5376?

Yes, a public proof-of-concept exploit is available for CVE-2023-5376. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2023-5376?

Within 7 days: Identify all affected systems running Korenix JetNet TFTP allows abuse of this service. This issue and apply vendor patches promptly. Audit authentication configurations and rotate any potentially compromised credentials.

Jetnet 5310G Firmware CVE-2023-5376

HIGH

Missing Authentication for Critical Function (CWE-306)

2024-01-09 office@cyberdanube.com

Authentication Bypass Jetnet 5310G Firmware Jetnet 4508 Firmware Jetnet 4508I W Firmware Jetnet 4508 W Firmware Jetnet 4508If S Firmware Jetnet 4508If M Firmware Jetnet 4508If Sw Firmware Jetnet 4508If Mw Firmware Jetnet 4508F M Firmware Jetnet 4508F S Firmware Jetnet 4508F Mw Firmware Jetnet 4508F Sw Firmware Jetnet 5620G 4C Firmware Jetnet 5612Gp 4F Firmware Jetnet 5612G 4F Firmware Jetnet 5728G 24P Ac 2Dc Us Firmware Jetnet 5728G 24P Ac 2Dc Eu Firmware Jetnet 6528Gf 2Ac Eu Firmware Jetnet 6528Gf 2Ac Us Firmware Jetnet 6528Gf 2Dc24 Firmware Jetnet 6528Gf 2Dc48 Firmware Jetnet 6528Gf Ac Eu Firmware Jetnet 6528Gf Ac Us Firmware Jetnet 6628Xp 4F Us Firmware Jetnet 6628X 4F Eu Firmware Jetnet 6728G 24P Ac 2Dc Us Firmware Jetnet 6728G 24P Ac 2Dc Eu Firmware Jetnet 6828Gf 2Dc48 Firmware Jetnet 6828Gf 2Dc24 Firmware Jetnet 6828Gf Ac Dc24 Us Firmware Jetnet 6828Gf 2Ac Us Firmware Jetnet 6828Gf Ac Us Firmware Jetnet 6828Gf 2Ac Au Firmware Jetnet 6828Gf Ac Dc24 Eu Firmware Jetnet 6828Gf 2Ac Eu Firmware Jetnet 6910G M12 Hvdc Firmware Jetnet 7310G V2 Firmware Jetnet 7628Xp 4F Us Firmware Jetnet 7628Xp 4F Eu Firmware Jetnet 7628X 4F Us Firmware Jetnet 7628X 4F Eu Firmware Jetnet 7714G M12 Hvdc Firmware

8.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:34 vuln.today

PoC Detected

Oct 08, 2025 - 10:15 vuln.today

Public exploit code

CVE Published

Jan 09, 2024 - 10:15 nvd

HIGH 8.6

DescriptionCVE.org

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

AnalysisAI

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306), which allows attackers to access critical functionality without authentication. An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. Affected products include: Korenix Jetnet 5310G Firmware, Korenix Jetnet 4508 Firmware, Korenix Jetnet 4508I-W Firmware, Korenix Jetnet 4508-W Firmware, Korenix Jetnet 4508If-S Firmware. Version information: version 2024.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Require authentication for all sensitive operations, implement defense in depth.