CVE-2024-32384

Name of the Vulnerable Software and Affected Versions Kerlink gateways versions prior to 5.10

Description Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, lacking HTTPS support. This absence of transport layer security enables a man-in-the-middle attacker to intercept and modify traffic between a client and the device.

Recommendations Update KerOS to version 5.10 or later.