CVE-2023-32727
published 2023-12-18CVE-2023-32727: An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code…
PriorityP343high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
0.87%
54.9th percentile
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | zabbix | < zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye) | zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye) |
| zabbix | zabbix | >= 0 < 1:5.0.44+dfsg-1+deb11u1 | 1:5.0.44+dfsg-1+deb11u1 |
| zabbix | zabbix | >= 0 < 1:6.0.23+dfsg-1 | 1:6.0.23+dfsg-1 |
| zabbix | zabbix | >= 0 < 1:6.0.23+dfsg-1 | 1:6.0.23+dfsg-1 |
| zabbix | zabbix | 4.0.0 – 4.0.49 | — |
| zabbix | zabbix | 5.0.0 – 5.0.38 | — |
| zabbix | zabbix | 6.0.0 – 6.0.22 | — |
| zabbix | zabbix | 6.4.0 – 6.4.7 | — |
| zabbix | zabbix | 7.0.0alpha1 – 7.0.0alpha6 | — |
| zabbix | zabbix_server | — | — |
| zabbix | zabbix_server | 4.0.0 – 4.0.49 | — |
| zabbix | zabbix_server | 5.0.0 – 5.0.38 | — |
| zabbix | zabbix_server | 6.0.0 – 6.0.22 | — |
| zabbix | zabbix_server | 6.4.0 – 6.4.7 | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
osv7.2HIGH
vendor_debian6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-32727: zabbix - An attacker who has the privilege to configure Zabbix items can use function icm...
vendor_debian·2023·CVSS 6.8
CVE-2023-32727 [MEDIUM] CVE-2023-32727: zabbix - An attacker who has the privilege to configure Zabbix items can use function icm...
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
Scope: local
bookworm: open
bullseye: resolved (fixed in 1:5.0.44+dfsg-1+deb11u1)
forky: resolved (fixed in 1:6.0.23+dfsg-1)
sid: resolved (fixed in 1:6.0.23+dfsg-1)
trixie: resolved (fixed in 1:6.0.23+dfsg-1)
GHSA
GHSA-8h32-vcmm-pcx8: An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitra
ghsa_unreviewed·2023-12-22
CVE-2023-32727 [HIGH] CWE-20 GHSA-8h32-vcmm-pcx8: An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitra
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
OSV
CVE-2023-32727: An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitra
osv·2023-12-18·CVSS 7.2
CVE-2023-32727 [HIGH] CVE-2023-32727: An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitra
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-12-18
Published