Description (CNA)
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://keros.docs.kerlink.com/security/security_advisories_kerOS5
- https://www.bdosecurity.de/en-gb/advisories/cve-2024-39148
ADP enrichment
No English description supplied.
No references supplied.