CVE-2023-32727CWE-20

Code execution vulnerability in icmpping

Medium · published December 18, 2023

CVSS v3.1
6.8
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00873 · 58.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-12-18T09:18Z
EPSS history
Timeline
  • 18 DEC 09:18Z
    Code execution vulnerability in icmpping
    cvelistv5