kerlink records
3 published records for vendor kerlink.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-402 Transmission of Private Resources into a New Sphere ('Resource Leak')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2024-39148No exploit | The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to ekerlink · keros · CWE-94 | High8.1 | — | 0.5% | Dec 1, 2025 |
29Monitor | CVE-2024-32384No exploit | Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support.kerlink · keros · CWE-319 | High7.4 | — | 0.1% | Dec 1, 2025 |
21Monitor | CVE-2024-32388No exploit | Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets.kerlink · keros · CWE-402 | Medium5.3 | — | 1.2% | Dec 1, 2025 |
- CVE-2024-3914832Monitor
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to e
HighCVSS 8.1No exploitEPSS 0%kerlink · kerosDec 1, 2025
- CVE-2024-3238429Monitor
Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support.
HighCVSS 7.4No exploitEPSS 0%kerlink · kerosDec 1, 2025
- CVE-2024-3238821Monitor
Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets.
MediumCVSS 5.3No exploitEPSS 1%kerlink · kerosDec 1, 2025