nvd-json-data-feeds/CVE-2023/CVE-2023-53xx/CVE-2023-5347.json

{
  "id": "CVE-2023-5347",
  "sourceIdentifier": "office@cyberdanube.com",
  "published": "2024-01-09T10:15:22.523",
  "lastModified": "2024-01-15T08:15:36.890",
  "vulnStatus": "Undergoing Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables.\u00a0This issue affects JetNet devices older than firmware version 2024/01."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de verificaci\u00f3n incorrecta de la firma criptogr\u00e1fica en el proceso de actualizaci\u00f3n de Korenix JetNet Series permite reemplazar todo el sistema operativo, incluidos los ejecutables confiables. Este problema afecta a los dispositivos JetNet anteriores a la versi\u00f3n de firmware 2024/01."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "office@cyberdanube.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "office@cyberdanube.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-347"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2024/Jan/11",
      "source": "office@cyberdanube.com"
    },
    {
      "url": "https://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetnet-series/",
      "source": "office@cyberdanube.com"
    },
    {
      "url": "https://www.beijerelectronics.com/en/support/Help___online?docId=69947",
      "source": "office@cyberdanube.com"
    }
  ]
}