CVE-2025-58123 MEDIUM

CVE-2025-58123: Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange

Weakness CWE-295
Published August 28, 2025
Last update August 28, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N

What the vulnerability does

01Description

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic.

Key dates

02Disclosure timeline

August 28, 2025 CVE published
August 28, 2025 Record updated