What is the CVSS score of CVE-2024-39148?

CVE-2024-39148 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Keros are affected by CVE-2024-39148?

CVE-2024-39148 is a critical remote code execution vulnerability in KerOS versions prior to 5.12 that allows unauthenticated attackers to execute commands with root privileges if the wmp-agent…

How to fix or mitigate CVE-2024-39148?

Within 24 hours: Inventory all KerOS deployments and identify which systems have wmp-agent exposed beyond local network boundaries; immediately isolate any exposed instances. Within 7 days: Implement strict network segmentation to restrict wmp-agent access to localhost or trusted internal networks only; deploy enhanced monitoring for suspicious connection attempts to the service. Within 30 days: Upgrade all KerOS instances to version 5.12 or later as patches become available; conduct post-upgrade validation and security testing.

Keros CVE-2024-39148

EUVD-2024-55105 HIGH

Code Injection (CWE-94)

2025-12-01 cve@mitre.org

RCE Code Injection Keros

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2024-55105

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

CVE Published

Dec 01, 2025 - 16:15 nvd

HIGH 8.1

DescriptionCVE.org

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall.

Analysis

Technical ContextAI

Remote code execution allows an attacker to run arbitrary commands or code on the target system over a network without prior authentication. This vulnerability is classified as Code Injection (CWE-94).

RemediationAI

Apply vendor patches immediately. Restrict network access to vulnerable services. Implement network segmentation and monitoring for anomalous activity.