CyberRota Analysis
AI-GeneratedIcinga 2 versions 2.8 through 2.14.9, 2.15.4, and 2.16.2 are vulnerable due to improper validation of sender endpoints in certificate update JSON-RPC messages, allowing unauthenticated attackers to replace node and CA certificates. This critical vulnerability can lead to node impersonation and potential control over the affected monitoring system. Organizations using these versions should prioritize immediate updates to mitigate the risk of unauthorized access and control.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and trusted CA certificate, impersonate a trusted node, and take control of the node. This issue is fixed in versions 2.14.9, 2.15.4, and 2.16.2.