Vulnerabilities

TI-2024-26188 CVE-2024-39148 · GHSA-hjfh-3qcg-j4x3

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic…

LOW 38

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00554 Published 2025-12-01 No fix listed CWE-94

TI-2024-21311 CVE-2024-32388 · GHSA-fh4c-98rx-vxvw

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12…

LOW 32

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00988 Published 2025-12-01 No fix listed CWE-402

TI-2024-21307 CVE-2024-32384 · GHSA-g66h-9qrm-pfwx

Kerlink gateways running KerOS prior to version 5.10 expose their web interface…

LOW 32

Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00189 Published 2025-12-01 No fix listed CWE-319

Vulnerabilities

Filters

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic…

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12…

Kerlink gateways running KerOS prior to version 5.10 expose their web interface…