CVE-2024-32384

Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support

Medium · published December 1, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client and the device.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2025-12-01T00:00Z
EPSS history
Timeline
  • 01 DEC 00:00Z
    Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support
    cvelistv5