CVE-2024-38861

Summary

CVE-2024-38861 is a vulnerability affecting the Checkmk Exchange plugin used in MikroTik networks. The issue involves improper certificate validation, allowing attackers in man-in-the-middle (MitM) positions to intercept traffic. This security weakness affects MikroTik versions from 2.0.0 through 2.5.5 and from 0.4a_mk through 2.0a. Attackers can exploit this vulnerability to conduct man-in-the-middle attacks, potentially gaining unauthorized access to sensitive information exchanged between affected devices. Mitigations include upgrading to a patched version of the plugin or implementing certificate pinning to prevent the use of compromised certificates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.