Lucene search
Ubuntu.comUB:CVE-2023-32728HistoryDec 18, 2023 - 12:00 a.m.
CVE-2023-32728
2023-12-1800:00:00
ubuntu.com
ubuntu.com
31
zabbix agent 2
smart.disk.get
remote code execution
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.7%
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters
before passing them to a shell command resulting possible vulnerability for
remote code execution.
Related
prion
prion
Remote code execution
2023-12-18 10:15:00
cvelist
cvelist
cve
cve
CVE-2023-32728
2023-12-18 10:15:07
debiancve
debiancve
CVE-2023-32728
2023-12-18 10:15:07
nvd
nvd
CVE-2023-32728
2023-12-18 10:15:07
redos
redos
ROS-20240328-05
2024-03-28 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.7%
Related for UB:CVE-2023-32728