CVE-2017-14021
A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.
Published:Nov 1, 2017
Last Modified:Apr 20, 2025
EPS:Nov 1, 2017
EPSS Score:0.00078
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Korenix
Product
Jetnet5018g Firmware
Korenix
Jetnet5018g Firmware
Vendor
Korenix
Product
Jetnet5310g Firmware
Korenix
Jetnet5310g Firmware
Vendor
Korenix
Product
Jetnet5428g-2g-2fx Firmware
Korenix
Jetnet5428g-2g-2fx Firmware
Vendor
Korenix
Product
Jetnet5628g-r Firmware
Korenix
Jetnet5628g-r Firmware
Vendor
Korenix
Product
Jetnet5628g Firmware
Korenix
Jetnet5628g Firmware
Vendor
Korenix
Product
Jetnet5728g-24p Firmware
Korenix
Jetnet5728g-24p Firmware
Vendor
Korenix
Product
Jetnet5828g Firmware
Korenix
Jetnet5828g Firmware
Vendor
Korenix
Product
Jetnet6710g-hvdc Firmware
Korenix
Jetnet6710g-hvdc Firmware
Vendor
Korenix
Product
Jetnet6710g Firmware
Korenix
Jetnet6710g Firmware
Vendor
Korenix
Product
Jetnet 5018g
Korenix
Jetnet 5018g
Vendor
Korenix
Product
Jetnet 5310g
Korenix
Jetnet 5310g
Vendor
Korenix
Product
Jetnet 5428g-2g-2fx
Korenix
Jetnet 5428g-2g-2fx
Vendor
Korenix
Product
Jetnet 5628g
Korenix
Jetnet 5628g
Vendor
Korenix
Product
Jetnet 5628g-r
Korenix
Jetnet 5628g-r
Vendor
Korenix
Product
Jetnet 5728g-24p
Korenix
Jetnet 5728g-24p
Vendor
Korenix
Product
Jetnet 5828g
Korenix
Jetnet 5828g
Vendor
Korenix
Product
Jetnet 6710g
Korenix
Jetnet 6710g
Vendor
Korenix
Product
Jetnet 6710g-hvdc
Korenix
Jetnet 6710g-hvdc
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
