CVE-2017-14021
CriticalSummary
A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G, JetNet5310G, JetNet5428G-2G-2FX, JetNet5628G-R, JetNet5628G, JetNet5728G-24P, JetNet5828G, JetNet6710G-HVDC, and JetNet6710G. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.
Risk Assessment
The risk to the organization involves the potential for an attacker to intercept communications, which could lead to data theft or the introduction of malicious software.
Recommendation
It is recommended to update devices to the latest software version to remove hard-coded cryptographic keys and implement additional measures to secure communications.
Original NVD description (English source)
A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.