Dear Community Members,
Recently, our Security Team together with the author of the package have been made aware of a vulnerability: server TLS certificates are not verified by the plugin upon connecting to the server.
It means that a potential attacker able to intercept communication (MitM) can eavesdrop on or manipulate the data being transmitted. This may lead to exposure of confidential information, such as router credentials.
The warning is placed in the package description and it will be removed as soon as the package is fixed. Unfortunately, we cannot indicate when this will happen.
Please note this when using the plug-in and,
Safe monitoring,
Your Checkmk Team.