Security Advisories - Products using KerOS5

Partial Firewall Bypass

• Published date: Oct 22, 2025
• ID: CVE-2024-32388 / KEROS-5078
• CVSSv3 score: 5.3
• Affected versions: KerOS 5.0 through KerOS 5.11
• Solution: upgrade to KerOS 5.12

Summary
The iptables firewall configuration allows to bypass UDP traffic by sending specially crafted UDP packets.

Acknowledgement
Kerlink is pleased to thank BDO Security for reporting this vulnerability under responsible disclosure.

wmp-agent: Remote Code Execution

• Published date: Oct 22, 2025
• ID: CVE-2024-39148 / KEROS-5079
• CVSSv3 score: 8.1
• Affected versions: KerOS 5.0 through KerOS 5.11
• Solution: upgrade to KerOS 5.12

Summary
The service wmp-agent does not properly validate magic URLs which allows remote code execution as user root when the service is accessible via network. Typically, the service is protected via firewall.

Acknowledgement
Kerlink is pleased to thank BDO Security for reporting this vulnerability under responsible disclosure.

Unencrypted Communication

• Published date: Oct 22, 2025
• ID: CVE-2024-32384 / KEROS-1537 / KEROS-5905
• CVSSv3 score: 6.8
• Affected versions: KerOS 5.0 through KerOS 5.9
• Solution: Workaround available since version 5.10

Summary
The web interface is only accessible via HTTP not via HTTPS, thus allowing a man-in-the-middle attacker to sniff and manipulate the connection.

Workaround
HTTPS is available since version 5.10. Please refer to KerOS Wiki for detailed instructions on how to enabled HTTPS.

Acknowledgement
Kerlink is pleased to thank BDO Security for reporting this vulnerability under responsible disclosure.