Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32727

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

Published

2023-12-18T10:15:06.937

Last Modified

2024-11-21T08:03:55.500

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zabbix zabbix_server ≤ 4.0.49 Yes
Application zabbix zabbix_server ≤ 5.0.38 Yes
Application zabbix zabbix_server ≤ 6.0.22 Yes
Application zabbix zabbix_server ≤ 6.4.7 Yes
Application zabbix zabbix_server 7.0.0 Yes
Application zabbix zabbix_server 7.0.0 Yes
Application zabbix zabbix_server 7.0.0 Yes
Application zabbix zabbix_server 7.0.0 Yes
References