Security Resilience

CVE-2023-22318

Tribe29 Checkmk Appliance Firmware ≤ 1.6.5

Published
15 May 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 7.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0054 44th percentile
Risk Priority 58 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-22318 is a high-severity Unrestricted Externally Accessible Lock (CWE-412) vulnerability in Tribe29 Checkmk Appliance Firmware. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique LSASS Memory (T1003.001); ranked at the 44th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.

CWE(s)
CWE-412CWE-667

Related Threats

MITRE ATT&CK Enterprise Techniques

T1003.001 LSASS Memory Credential Access
Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
attack.mitre.org →
T1003.002 Security Account Manager Credential Access
Adversaries may attempt to extract credential material from the Security Account Manager (SAM) database either through in-memory techniques or through the Windows Registry where the SAM database is stored.
attack.mitre.org →
T1003.007 Proc Filesystem Credential Access
Adversaries may gather credentials from the proc filesystem or `/proc`.
attack.mitre.org →
T1006 Direct Volume Access Stealth
Adversaries may directly access a volume to bypass file access controls and file system monitoring.
attack.mitre.org →
T1007 System Service Discovery Discovery
Adversaries may try to gather information about registered local system services.
attack.mitre.org →
T1012 Query Registry Discovery
Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2023-22309Same product: Tribe29 Checkmk Appliance Firmware
CVE-2023-22307Same product: Tribe29 Checkmk Appliance Firmware
CVE-2023-6287Same product: Tribe29 Checkmk Appliance Firmware
CVE-2026-62426Shared CWE-412, CWE-667
CVE-2023-38505Shared CWE-412, CWE-667
CVE-2023-22294Same vendor: Tribe29
CVE-2026-25612Shared CWE-412
CVE-2024-0639Shared CWE-667
CVE-2023-0160Shared CWE-667
CVE-2023-3436Shared CWE-667

Affected Assets

tribe29
checkmk appliance firmware
≤ 1.6.5

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

ID.RA-01 partial match
blocks

Vulnerability identification processes can discover externally controllable locks before deployment.

PR.AA-05 partial match
blocks

Enforcing least-privilege authorization policies directly prevents external actors from acquiring or influencing locks.

PR.IR-01 partial match
blocks

Logical access controls and segmentation stop unintended external influence over synchronization primitives.

PR.PS-01 partial match
blocks

Hardened configuration baselines can disable or restrict external lock exposure by default.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.19 Installation of software on operational systems partial match
removes
A.8.2 Privileged access rights partial match
degrades

Privileged access rights limit who can create or manipulate locks, reducing external influence.

A.8.25 Secure development life cycle partial match
blocks

Secure development lifecycle practices can prevent introducing externally controllable locks during design.

A.8.26 Application security requirements partial match
blocks

A.8.26 only requires that security requirements (including resilience against attacks such as injections) be identified and specified during development or acquisition; it does not itself enforce, implement, or prevent exploitation of an externally influenced lock.

A.8.27 Secure system architecture and engineering principles partial match
blocks

A.8.27 mandates establishing and applying secure-by-design principles (defense-in-depth, least privilege, fail securely, distrust external input, zero-trust verification) during architecture and engineering; CWE-412 is a concrete implementation flaw (lock check that can be externally overridden) that can still be introduced and exploited even when those principles are followed, as the control does not itself enforce or verify the specific lock-isolation logic.

A.8.28 Secure coding partial match
prevents

Secure coding guidelines can enforce internal-only lock control during implementation.

Hardening callouts derived

DISA STIG baselines are authored against specific weaknesses. Where this CVE cites a broad weakness class, the mapping is not asserted at that abstraction (owner ruling, 2026-09-25: grade only at Base and below), so no rule is shown here rather than a rule shown against the wrong grain.

  • No fine-grained STIG row for CWE-667, a class-level weakness, and none of its children carries one either.

References