CVE-2024-32388

MEDIUM EPSS 69.1%
Published Dec 1, 20257mo ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Medium
Find Similar
Published Dec 1, 2025 7mo ago
Last Modified Jun 17, 2026 2w ago

Description

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected.

CVSS Details

Base Score
5.3
Exploitability
3.9
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
69.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 2

CWE-402
CWE-940

Affected Products 1

VendorProductVersionRange
kerlinkkeros*≥5.0  –  <5.12

References 2

  • keros.docs.kerlink.com https://keros.docs.kerlink.com/security/security_advisories_kerOS5
    Vendor Advisory
  • bdosecurity.de https://www.bdosecurity.de/en-gb/advisories/cve-2024-32388
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.