Kerlink Wirnet iStation 868 KerOS Directory Traversal Vulnerability Allowing Arbitrary File Overwrite

A directory traversal vulnerability has been identified in the Kerlink Wirnet iStation 868 running KerOS versions through 4.3.3. This vulnerability allows remote attackers to exploit the SNMP update mechanism to overwrite arbitrary files on the device, potentially leading to unauthorized privileged access and full compromise of the device.

Impact

Exploitation of this vulnerability can result in arbitrary file overwriting, with the potential for full device compromise and unauthorized privileged access.

Remediation

Users are advised to upgrade to the latest version of KerOS 6, as KerOS 4 and 5 are no longer supported.