VULNERABILITY INTELLIGENCE

CVE-2014-5340

CVSS score9.3 HIGH
EPSS probability6.14%
CISA KEVNot currently listed
Published2014-09-02
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references