Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 21 |
|---|---|---|---|---|
 | Exploit for Uncontrolled Search Path Element in Checkmk | 8 Jan 202601:34 | – | githubexploit |
| Exploit for Uncontrolled Search Path Element in Checkmk | 24 Jun 202610:23 | – | githubexploit |
| Exploit for Uncontrolled Search Path Element in Checkmk | 13 Jan 202622:52 | – | githubexploit |
| Exploit for Uncontrolled Search Path Element in Checkmk | 8 Jan 202601:32 | – | githubexploit |
 | The vulnerability of the Checkmk monitoring software for IT infrastructure allows a hacker to increase their privileges. | 6 Apr 202400:00 | – | bdu_fstec |
 | CVE-2024-0670 | 11 Mar 202416:32 | – | circl |
 | Checkmk Permission License and Access Control Issues Vulnerability | 11 Mar 202400:00 | – | cnnvd |
 | CVE-2024-0670 Privilege escalation in windows agent | 11 Mar 202414:50 | – | cvelist |
 | EUVD-2024-16461 | 3 Oct 202520:07 | – | euvd |
 | Vulnerability fixed in CheckMK | 28 Feb 202400:00 | – | ncsc |
10
Node
AND
OR
[
{
"defaultStatus": "unaffected",
"product": "Checkmk",
"vendor": "Checkmk GmbH",
"versions": [
{
"lessThan": "2.2.0p23",
"status": "affected",
"version": "2.2.0",
"versionType": "semver"
},
{
"lessThan": "2.1.0p40",
"status": "affected",
"version": "2.1.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.0.0p39",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
]| Source | Link |
|---|---|
| checkmk | www.checkmk.com/werk/16361 |
| seclists | www.seclists.org/fulldisclosure/2024/Mar/29 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| cmk_all_${_}_1.cmd | path | C:\Windows\Temp\cmk_all_${_}_1.cmd | Local Privilege Escalation via writable files (Checkmk) - temporary cmd files created in Windows Temp used to escalate privileges | CWE-427 |
| mal.exe | path | C:\Users\attacker\Desktop\mal.exe | Malicious binary used in PoC to execute with SYSTEM privileges | CWE-427 |
| fafda3e.msi | path | C:\Windows\Installer\fafda3e.msi | Installer file used in PoC to force write/execute temporary files during repair | CWE-427 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 06:54Current
8.7High risk
Vulners AI Score8.7
CVSS 3.17.8 - 8.8
EPSS0.00342
SSVC