CVE-2024-32384

7.4 highEPSS 0.2%

High (7.4) in kerlink keros. EPSS 0.2% chance of exploitation in the next 30 days.

Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client and the device.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2025-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kerlink:keros

References

https://keros.docs.kerlink.com/security/security_advisories_kerOS5
https://www.bdosecurity.de/en-gb/advisories/cve-2024-32384

Check your stack JSON