This vulnerability (CVE-2024-32387) affects Kerlink Wirnet iStation 868 running KerOS v4.3.3_20200803132042. It enables a remote attacker to retrieve sensitive information via the community string component, which is typically related to SNMP configurations. The CVSS 3.1 base score is 5.7, indicating medium severity, with attack vector being adjacent network, low attack complexity, no privileges required, no impact on availability or integrity, and requires user interaction. The vulnerability is categorized under CWE-200 (Exposure of Sensitive Information) and CWE-798 (Use of Hard-coded Credentials). There is no vendor advisory or patch information available at this time.

An attacker can remotely obtain sensitive information from the affected device without needing privileges or causing disruption to availability or integrity. The exposure of the community string could lead to further reconnaissance or exploitation depending on the environment. However, there is no indication of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected device, especially from untrusted networks, to reduce exposure. Monitor for any updates from the vendor regarding patches or official mitigations.