CVE-2024-32387: n/a
A vulnerability in Kerlink Wirnet iStation 868 KerOS version 4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the community string component. The issue has a medium severity with a CVSS score of 5.7. No patch or official remediation guidance is currently provided by the vendor. The vulnerability does not require privileges but involves user interaction and network attack vector with low attack complexity.
AI Analysis
Technical Summary
CVE-2024-32387 describes a vulnerability in Kerlink Wirnet iStation 868 KerOS v4.3.3_20200803132042 where a remote attacker can extract sensitive information through the community string component. The CVSS 3.1 vector indicates the attack requires network access with low complexity, no privileges, and user interaction. The impact is confidentiality loss without integrity or availability impact. No vendor advisory or patch information is available to confirm remediation status.
Potential Impact
The vulnerability allows remote attackers to obtain sensitive information, specifically related to the community string component, which could lead to confidentiality breaches. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit network exposure of the affected device and restrict access to trusted users to reduce risk.
CVE-2024-32387: n/a
Description
A vulnerability in Kerlink Wirnet iStation 868 KerOS version 4.3.3_20200803132042 allows a remote attacker to obtain sensitive information via the community string component. The issue has a medium severity with a CVSS score of 5.7. No patch or official remediation guidance is currently provided by the vendor. The vulnerability does not require privileges but involves user interaction and network attack vector with low attack complexity.
CVSS v3.1
Score 5.7medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-32387 describes a vulnerability in Kerlink Wirnet iStation 868 KerOS v4.3.3_20200803132042 where a remote attacker can extract sensitive information through the community string component. The CVSS 3.1 vector indicates the attack requires network access with low complexity, no privileges, and user interaction. The impact is confidentiality loss without integrity or availability impact. No vendor advisory or patch information is available to confirm remediation status.
Potential Impact
The vulnerability allows remote attackers to obtain sensitive information, specifically related to the community string component, which could lead to confidentiality breaches. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit network exposure of the affected device and restrict access to trusted users to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2024-04-12T00:00:00.000Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a594a9a68715ace43b94b82
Added to database: 07/16/2026, 21:18:18 UTC
Last enriched: 07/16/2026, 21:33:16 UTC
Last updated: 07/16/2026, 23:17:59 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.