KerOS Directory Traversal via SNMP Update

Executive Summary

This is a directory traversal vulnerability in Kerlink Wirnet iStation 868 running KerOS v4.3.3_20200803132042. It allows a remote attacker to access sensitive information through the SNMP update mechanism by exploiting improper path validation.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves a directory traversal in Kerlink Wirnet iStation 868 KerOS v4.3.3_20200803132042 via SNMP updates. To detect it, check if the device is running the vulnerable version and monitor SNMP update traffic for unusual file access patterns. Verify KerOS version via web interface or CLI. Look for unauthorized file reads or writes in system logs.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to read sensitive files or data on the device, potentially leading to information disclosure. This may allow unauthorized access to system configurations or other confidential data stored on the iStation.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations using affected devices may face compliance violations, data breach notifications, and potential fines.

Useful 0 Not Useful 0

Mitigation Strategies

Update Kerlink Wirnet iStation 868 KerOS to the latest version to address the directory traversal vulnerability in the SNMP update mechanism. Disable SNMP if not required or restrict access to trusted sources only.

Useful 0 Not Useful 0