CVE-2024-32384
Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-…
Published: 2025-12-01 · CVSS: 6.8 · CVSS 3.1
Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client and the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7