CVE-2023-22318: tribe29 checkmk_appliance_firmware Unrestricted Externally Accessible Lock
CVSS: 7.5v3.1HighModified
AliasesUBUNTU-CVE-2023-22318
Published 15-05-2023Last modified 23-01-2025
Vulnerability summary
CVE-2023-22318 is a high (CVSS 7.5) Unrestricted Externally Accessible Lock vulnerability in tribe29 checkmk_appliance_firmware. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44.3% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
0.54%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 15-05-2023PublishedVulnerability first disclosed.
- 23-01-2025Last modifiedVulnerability information updated.
Description
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.
CVSS metrics
3 scores · 3 sources · 1 versionHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.54%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
0.00 pp
From 0.54% on 21-09-2026
21-09-202621-10-2026
EPSS score0.54%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-412Unrestricted Externally Accessible LockThe product properly checks for the existence of a lock, but the lock can be externally controlled or influenced by an actor that is outside of the intended sphere of control.
- CWE-667Improper LockingThe product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
Affected systems
Tribe291 product
- checkmk_appliance_firmware< 1.6.5
Ubuntu1 product
- check-mkAll versions (No fix recorded)
2 vendors · 2 products