Lucene search
HistoryDec 18, 2023 - 10:15 a.m.
CVE-2023-32727
arbitrary code execution
zabbix
privilege escalation
cve-2023-32727
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.8%
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
Affected configurations
Node
zabbixzabbix_serverRange4.0.0–4.0.49
ORzabbixzabbix_serverRange5.0.0–5.0.38
ORzabbixzabbix_serverRange6.0.0–6.0.22
ORzabbixzabbix_serverRange6.4.0–6.4.7
ORzabbixzabbix_serverMatch7.0.0alpha1
ORzabbixzabbix_serverMatch7.0.0alpha2
ORzabbixzabbix_serverMatch7.0.0alpha3
ORzabbixzabbix_serverMatch7.0.0alpha6
References
Related
prion
prion
Command injection
2023-12-18 10:15:00
debiancve
debiancve
CVE-2023-32727
2023-12-18 10:15:06
ubuntucve
ubuntucve
CVE-2023-32727
2023-12-18 00:00:00
nessus
nessus
openSUSE 15 Security Update : zabbix (openSUSE-SU-2023:0418-1)
2023-12-29 00:00:00
openSUSE 15 Security Update : zabbix (openSUSE-SU-2023:0419-1)
2023-12-29 00:00:00
openvas
openvas
openSUSE: Security Advisory for zabbix (openSUSE-SU-2023:0418-1)
2024-03-04 00:00:00
cve
cve
CVE-2023-32727
2023-12-18 10:15:06
cvelist
cvelist
CVE-2023-32727 Code execution vulnerability in icmpping
2023-12-18 09:18:48
redos
redos
ROS-20240328-05
2024-03-28 00:00:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.8%
Related for NVD:CVE-2023-32727