CVE-2024-32387
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to obtain sensitive information via the community string component. The issue affects version 4.3.3_20200803132042.
Risk Assessment
An attacker could intercept confidential configuration or authentication data, potentially leading to network and IoT device security breaches.
Recommendation
Immediately update the KerOS firmware to the latest available version and restrict management interface access to trusted networks only.
Other vulnerabilities in KerOS
See all- CVE-2024-32389Low
A buffer overflow vulnerability in KerOS software of Kerlink Wirnet iStation 868 version 4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the update URLs component.
- CVE-2024-32386High
A directory traversal vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to read sensitive files via the SNMP update mechanism.
- CVE-2024-32385Medium
A vulnerability in the KerOS software of the Kerlink Wirnet iStation 868 allows a remote attacker to obtain sensitive information via boardID and revisionID components.
Original NVD description (English source)
An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the community string component.