CVE-2023-5376 - CVE House

Status published High CVE-2023-5376

TFTP Without Authentication

8.6 CVSS

Vulnerability Description

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-5376

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

S. Dietz (CyberDanube)

References

More from Korenix

View All →

CVE-2024-7397

Unauthenticated Command Injection

Critical 9.3

CVE-2024-7396

Plaintext Communication

High 7.1

CVE-2024-7395

Insufficient Authentication

Critical 9.3

CVE-2024-2371

Information exposure vulnerability in Korenix JetI/O 6550

Affected Vendor

Korenix

View all reports →

Affected Software

JetNet Series

Vulnerable Versions:

firmware older than 2024/01

Timeline

Official Publish: January 9th, 2024

Last Modified: October 8th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application