CVE-2025-58125 MEDIUM

CVE-2025-58125: Lack of TLS validation in plugin Freebox v6 agent on Checkmk Exchange

Weakness CWE-295
Published August 28, 2025
Last update August 28, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N

What the vulnerability does

01Description

Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic.

Key dates

02Disclosure timeline

August 28, 2025 CVE published
August 28, 2025 Record updated