PT-2025-48465 · Kerlink · Kerlink Gateways+1

Published 2025-12-01 · Updated 2025-12-23 · CVE-2024-32384

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Kerlink gateways versions prior to 5.10

Description Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, lacking HTTPS support. This absence of transport layer security enables a man-in-the-middle attacker to intercept and modify traffic between a client and the device.

Recommendations Update KerOS to version 5.10 or later.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2024-32384

Affected Products

Keros

Kerlink Gateways

References · 7

• https://keros.docs.kerlink.com/security/security_advisories_kerOS5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-32384 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-32384 · Security Note
• https://bdosecurity.de/en-gb/advisories/cve-2024-32384 · Note
• https://twitter.com/VulmonFeeds/status/1995632666071228517 · Twitter Post
• https://t.me/cveNotify/146670 · Telegram Post
• https://twitter.com/CVEnew/status/1995519583575310638 · Twitter Post