CVE-2023-32727

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.zabbix.com/browse/ZBX-23857	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha1::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha2::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha3::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha6::::::

History

No history.

Information

Published : 2023-12-18 10:15

Updated : 2023-12-22 17:48

NVD link : CVE-2023-32727

Mitre link : CVE-2023-32727

CVE.ORG link : CVE-2023-32727

JSON object : View

Products Affected

zabbix

zabbix_server

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2023-32727", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}, {"type": "Secondary", "source": "security@zabbix.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}]}, "published": "2023-12-18T10:15:06.937", "references": [{"url": "https://support.zabbix.com/browse/ZBX-23857", "tags": ["Vendor Advisory"], "source": "security@zabbix.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Secondary", "source": "security@zabbix.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server."}, {"lang": "es", "value": "Un atacante que tiene el privilegio de configurar elementos de Zabbix puede usar la funci\u00f3n icmpping() con un comando malicioso adicional dentro para ejecutar c\u00f3digo arbitrario en el servidor Zabbix actual."}], "lastModified": "2023-12-22T17:48:43.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7513ABE2-B8AD-4E25-8EE5-29F07902B696", "versionEndIncluding": "4.0.49", "versionStartIncluding": "4.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBBB16D3-006C-4EBF-9C10-D25158E606DD", "versionEndIncluding": "5.0.38", "versionStartIncluding": "5.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C79F088A-4743-4EBC-BF6F-5B7842CB21BB", "versionEndIncluding": "6.0.22", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C048503B-E983-455E-9D4F-F0FA6E0D32F5", "versionEndIncluding": "6.4.7", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DC55403-7711-4719-A309-2616586ED479"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BB0DFCF-6ED3-4BA3-8B3F-D1F6D06A08DB"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B17E6DD-0DA4-4002-B2D2-C16EED6C97BA"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3358B565-5049-4373-9529-2F70F2F50AEC"}], "operator": "OR"}]}], "sourceIdentifier": "security@zabbix.com"}