Jakob Hartmann

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin Freebox v6 agent (affected versions not specified) **Description** The Checkmk Exchange plugin Freebox v6 agent contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept network traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin versions (affected versions not specified) **Description** Improper certificate validation in the Checkmk Exchange plugin’s BGP monitoring functionality allows attackers positioned in a man-in-the-middle (MitM) position to intercept traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk versions (affected versions not specified) **Description** The Checkmk Exchange plugin `check-mk-api` contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept network traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin VMware vSAN (affected versions not specified) **Description** The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin Dell Powerscale (affected versions not specified) **Description** The Checkmk Exchange plugin for Dell Powerscale contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle (MitM) position to intercept network traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Checkmk Exchange plugin check-mk-api versions prior to 5.8.1 **Description** The issue involves insecure deserialization and improper certificate validation. **Recommendations** For versions prior to 5.8.1, update to version 5.8.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MikroTik versions 0.4a mk through 2.0a MikroTik versions 2.0.0 through 2.5.5 **Description** The issue is related to improper certificate validation in the Checkmk Exchange plugin for MikroTik routers, which can allow an attacker to intercept traffic. This can be exploited by an attacker in a man-in-the-middle position, potentially leading to spoofing attacks. **Recommendations** For versions 0.4a mk through 2.0a, consider disabling the Checkmk Exchange plugin until a patch is available. For versions 2.0.0 through 2.5.5, consider restricting access to the plugin to minimize the risk of exploitation. As a temporary workaround, avoid using the affected plugin in sensitive environments until the issue is resolved.