CVE-2024-32388

Medium · 5.3

CVSS

5.3

EPSS

1.2%

Published

Dec 1, 2025

CISA due date

—

The record

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected.

Affected packages

Ecosystem	Package	Introduced	Fixed