Improper Certificate Validation in Checkmk Exchange Plugin BGP Monitoring
CVE-2025-58123

6.9MEDIUM

Key Information:

Status
Vendor
CVE Published:
28 August 2025

What is CVE-2025-58123?

The Checkmk Exchange BGP Monitoring plugin suffers from improper certificate validation, which can be exploited by attackers positioned in a Man-in-the-Middle (MitM) framework. This vulnerability allows unauthorized interception of traffic, potentially compromising sensitive data. Organizations using this plugin should implement immediate security measures to mitigate the risk of traffic interception and safeguard their network communications.

References

https://exchange.checkmk.com/p/bgp-mon
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Felix Eberstaller (Limes Security)
Jakob Hartmann (Limes Security)
.
CVE-2025-58123 : Improper Certificate Validation in Checkmk Exchange Plugin BGP Monitoring