Skip to content
OpenAdvisories
Medium · 4.9 CVE-2024-38861 EUVD-2024-37648GHSA-r232-jmqm-j6g6

Lack of TLS validation in plugin MikroTik on Checkmk Exchange

Published Sep 27, 2024 · Updated Sep 27, 2024 · Assigned by Checkmk

Description

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4a_mk through 2.0a.

Affected products

VendorProductAffectedFixed
— MikroTik 2.0.0 – ≤ 2.5.5, 0.4a_mk – ≤ 2.0a —

References