VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 2, 2014· Updated May 6, 2026

CVE-2014-5340

CVE-2014-5340

Description

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

Affected products

7
  • Check Mk Project/Check Mk7 versions
    cpe:2.3:a:check_mk_project:check_mk:1.2.5:i3:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i3:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:*:p3:*:*:*:*:*:*range: <=1.2.4
    • cpe:2.3:a:check_mk_project:check_mk:1.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i1:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i2:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.