PT-2025-22330 · Checkmk · Checkmk

Published 2025-05-21 · Updated 2025-05-22 · CVE-2025-1712

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p1 Checkmk versions prior to 2.3.0p32 Checkmk versions prior to 2.2.0p42 Checkmk version 2.1.0

Description The issue allows authenticated attackers to write arbitrary files due to argument injection in special agent configuration.

Recommendations For Checkmk versions prior to 2.4.0p1, update to version 2.4.0p1 or later. For Checkmk versions prior to 2.3.0p32, update to version 2.3.0p32 or later. For Checkmk versions prior to 2.2.0p42, update to version 2.2.0p42 or later. For Checkmk version 2.1.0, consider upgrading to a newer version to mitigate the risk.

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2025-1712

Affected Products

Checkmk

References · 9

• https://osv.dev/vulnerability/CVE-2025-1712 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1712 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-1712 · Security Note
• https://ubuntu.com/security/CVE-2025-1712 · Vendor Advisory
• https://checkmk.com/werk/17996 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-1712 · Vendor Advisory
• https://t.me/latest_high_impact_cve/2430 · Telegram Post
• https://twitter.com/CveFindCom/status/1925124224965812635 · Twitter Post
• https://twitter.com/CVEnew/status/1925123633351115068 · Twitter Post