CVE-2021-40905

CVSS 8.8 HIGHEPSS 2.8%CWE-434

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.8EPSS 2.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Mar 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session of a user with administrator role. NOTE: the vendor states that this is the intended behavior: admins are supposed to be able to execute code in this manner

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://checkmk.com https://github.com/Edgarloyola/CVE-2021-40905