What’s Vulnerable › Vulnerabilities
CVE-2024-6572: Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'
- Severity: high (CVSS 7.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-09 · updated 2026-06-17
- Weakness: CWE-322
Description
Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic
Affected products
- Checkmk GmbH Checkmk: 2.0.0, 2.1.0, 2.1.0-b1, 2.1.0-b2, 2.1.0-b3, 2.1.0-b4 (+115)
References
Get alerted when CVE-2024-6572 or the next vulnerability affects your stack