Keros vulnerabilities

2 known vulnerabilities in Keros from Kerlink. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Keros: Improper Control of Generation of Code

  CVE-2024-39148Dec 1, 2025Kerlink

  The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via

• 7.4 High severity

  Keros: Cleartext Transmission of Sensitive Information

  CVE-2024-32384Dec 1, 2025Kerlink

  Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client and the d