CVE-2024-32384

CVE-2024-32384 describes a critical vulnerability in Kerlink gateways running KerOS prior to version 5.10, where the web interface exclusively uses unencrypted HTTP. This absence of HTTPS allows a man-in-the-middle attacker to intercept and alter sensitive traffic between a client and the device. With a CVSS score of 7.4 (High), this vulnerability has a network attack vector and high impact on confidentiality and integrity, despite high attack complexity. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.