VULNERABILITY INTELLIGENCE
CVE-2014-2331
CVSS score8.5 HIGH
EPSS probability2.07%
CISA KEVNot currently listed
Published2015-08-31
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C
Description
Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')