Remote code execution

2023-12-1810:15:00

PRIOn knowledge base

www.prio-n.com

zabbix agent 2

smart.disk.get

remote code execution

vulnerability

nvd

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.7%

JSON

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.

CPENameOperatorVersion
zabbix-agent2ge5.0.0
zabbix-agent2le5.0.38
zabbix-agent2ge6.0.0
zabbix-agent2le6.0.23
zabbix-agent2ge6.4.0
zabbix-agent2le6.4.8
zabbix-agent2eq7.0.0 alpha1
zabbix-agent2eq7.0.0 alpha2
zabbix-agent2eq7.0.0 alpha3
zabbix-agent2eq7.0.0 alpha6

Name	Operator	Version
zabbix-agent2	ge	5.0.0
zabbix-agent2	le	5.0.38
zabbix-agent2	ge	6.0.0
zabbix-agent2	le	6.0.23
zabbix-agent2	ge	6.4.0
zabbix-agent2	le	6.4.8
zabbix-agent2	eq	7.0.0 alpha1
zabbix-agent2	eq	7.0.0 alpha2
zabbix-agent2	eq	7.0.0 alpha3
zabbix-agent2	eq	7.0.0 alpha6