Описание
Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected.
Ссылки
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 5.0 (включая) до 5.12 (исключая)
cpe:2.3:o:kerlink:keros:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00043
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-402
Связанные уязвимости
CVSS3: 5.3
github
2 месяца назад
Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected.
EPSS
Процентиль: 13%
0.00043
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-402