CVE-2024-32386
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
A directory traversal vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to read sensitive files via the SNMP update mechanism.
Risk Assessment
An attacker can access confidential system files, leading to data leakage and potential device compromise.
Recommendation
Immediately update KerOS to the latest version and restrict SNMP access to trusted IP addresses only.
Other vulnerabilities in KerOS
See all- CVE-2024-32389Low
A buffer overflow vulnerability in KerOS software of Kerlink Wirnet iStation 868 version 4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the update URLs component.
- CVE-2024-32387Medium
A vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to obtain sensitive information via the community string component. The issue affects version 4.3.3_20200803132042.
- CVE-2024-32385Medium
A vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to obtain sensitive information via boardID and revisionID components.
Original NVD description (English source)
Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the SNMP update mechanism.