CVE-2024-13723CWE-434
Checkmk NagVis Remote Code Execution
High · published February 4, 2025
What it is
The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP.
The record
Technical detail
- CVSS v3.1
- 7.2 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01282 · 69.8th percentile
- Weakness
- CWE-434 · Unrestricted Upload of File with Dangerous Type
- Published
- 2025-02-04T22:02Z
EPSS history
Timeline