CVE-2024-6572

HIGH

Published Sep 9, 2024 Modified Aug 25, 2025 CWE-322

Description

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic

CVSS v3.1 Score

7.4

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness Type (CWE)

CWE-322 CWE-322

Affected Products

Vendor	Product	Versions
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All
checkmk	checkmk	All

References

Advisories & Patches

https://checkmk.com/werk/17148

Frequently Asked Questions

What is CVE-2024-6572? +

How severe is CVE-2024-6572? +

CVE-2024-6572 has a CVSS v3.1 score of 7.4 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2024-6572? +

CVE-2024-6572 affects products from checkmk, specifically: checkmk. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-6572? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-44467

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. …

CVE-2025-20163 8.7

A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to …

CVE-2024-47519 8.3

Backup uploads to ETM subject to man-in-the-middle interception

CVE-2026-45361 8.1

Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute …

CVE-2024-7516 7.1

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that …

CVE-2024-4871 6.8

A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is …