Home

Description

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected.

PUBLISHED Reserved 2024-04-12 | Published 2025-12-01 | Updated 2025-12-01 | Assigner mitre




MEDIUM: 5.3CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N

References

www.bdosecurity.de/en-gb/advisories/cve-2024-32388

keros.docs.kerlink.com/security/security_advisories_kerOS5

cve.org (CVE-2024-32388)

nvd.nist.gov (CVE-2024-32388)

Download JSON