CVE-2024-32385
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to obtain sensitive information via boardID and revisionID components.
Risk Assessment
An attacker can retrieve device identification data, which may facilitate further attacks or hardware identity theft.
Recommendation
It is recommended to update the KerOS firmware to the latest version and restrict access to device management interfaces.
Other vulnerabilities in KerOS
See all- CVE-2024-32389Low
A buffer overflow vulnerability in KerOS software of Kerlink Wirnet iStation 868 version 4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the update URLs component.
- CVE-2024-32387Medium
A vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to obtain sensitive information via the community string component. The issue affects version 4.3.3_20200803132042.
- CVE-2024-32386High
A directory traversal vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to read sensitive files via the SNMP update mechanism.
Original NVD description (English source)
An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via a boardID and revisionID components