VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 2, 2014· Updated Jun 17, 2026

CVE-2014-5340

CVE-2014-5340

Description

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Check Mk Project/Check Mk8 versions
    cpe:2.3:a:check_mk_project:check_mk:1.2.4:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:check_mk_project:check_mk:1.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i1:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i2:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i3:*:*:*:*:*:*
    • cpe:2.3:a:check_mk_project:check_mk:*:p3:*:*:*:*:*:*range: <=1.2.4
    • (no CPE)range: before 1.2.4p4 and 1.2.5 before 1.2.5i4

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.