CVE-2023-32727

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.zabbix.com/browse/ZBX-23857	Vendor Advisory
https://support.zabbix.com/browse/ZBX-23857	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server::::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha1::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha2::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha3::::::
	cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha6::::::

History

21 Nov 2024, 08:03

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.2~~	v2 : unknown v3 : 6.8
References	~~() https://support.zabbix.com/browse/ZBX-23857 - Vendor Advisory~~	() https://support.zabbix.com/browse/ZBX-23857 - Vendor Advisory

22 Dec 2023, 17:48

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.2
References	~~() https://support.zabbix.com/browse/ZBX-23857 -~~	() https://support.zabbix.com/browse/ZBX-23857 - Vendor Advisory
First Time		Zabbix Zabbix zabbix Server
CWE		CWE-20
CPE		cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha1:::::: cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha3:::::: cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha6:::::: cpe:2.3:a:zabbix:zabbix_server:::::::: cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha2::::::

18 Dec 2023, 10:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-18 10:15

Updated : 2024-11-21 08:03

NVD link : CVE-2023-32727

Mitre link : CVE-2023-32727

CVE.ORG link : CVE-2023-32727

JSON object : View

Products Affected

zabbix

zabbix_server

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2023-32727", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@zabbix.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2023-12-18T10:15:06.937", "references": [{"url": "https://support.zabbix.com/browse/ZBX-23857", "tags": ["Vendor Advisory"], "source": "security@zabbix.com"}, {"url": "https://support.zabbix.com/browse/ZBX-23857", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@zabbix.com", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server."}, {"lang": "es", "value": "Un atacante que tiene el privilegio de configurar elementos de Zabbix puede usar la funci\u00f3n icmpping() con un comando malicioso adicional dentro para ejecutar c\u00f3digo arbitrario en el servidor Zabbix actual."}], "lastModified": "2024-11-21T08:03:55.500", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7513ABE2-B8AD-4E25-8EE5-29F07902B696", "versionEndIncluding": "4.0.49", "versionStartIncluding": "4.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBBB16D3-006C-4EBF-9C10-D25158E606DD", "versionEndIncluding": "5.0.38", "versionStartIncluding": "5.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C79F088A-4743-4EBC-BF6F-5B7842CB21BB", "versionEndIncluding": "6.0.22", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C048503B-E983-455E-9D4F-F0FA6E0D32F5", "versionEndIncluding": "6.4.7", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DC55403-7711-4719-A309-2616586ED479"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BB0DFCF-6ED3-4BA3-8B3F-D1F6D06A08DB"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B17E6DD-0DA4-4002-B2D2-C16EED6C97BA"}, {"criteria": "cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3358B565-5049-4373-9529-2F70F2F50AEC"}], "operator": "OR"}]}], "sourceIdentifier": "security@zabbix.com"}