CVE-2023-5376CWE-306

TFTP Without Authentication

High · published January 9, 2024

CVSS v3.1
8.6
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01414 · 72.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-01-09T09:44Z
EPSS history
Timeline
  • 09 JAN 09:44Z
    TFTP Without Authentication
    cvelistv5