MikroTik Checkmk Exchange plugin Vulnerability - Intercept Traffic in MitM Position
CVE-2024-38861

7.4HIGH

Key Information:

Vendor

MikroTik

Status
Mikrotik
Vendor
CVE Published:
27 September 2024

What is CVE-2024-38861?

A vulnerability in MikroTik's Checkmk Exchange plugin has been identified, revealing improper certificate validation practices. This flaw allows attackers in a man-in-the-middle (MitM) position to intercept and manipulate traffic intended for genuine users. The issue affects MikroTik products ranging from versions 2.0.0 to 2.5.5 and from 0.4a_mk to 2.0a, posing significant security risks for organizations relying on this plugin. It is essential for users to apply the necessary updates to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.checkmk.com/p/mikrotik

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.