9.8

CVE-2022-43516

Exploit

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zabbix ≫ Zabbix Version >= 6.0.10 < 6.0.12
Zabbix ≫ Zabbix Version >= 6.2.0 < 6.2.6
Zabbix ≫ Zabbix Version6.0.12 Updaterc1
Zabbix ≫ Zabbix Version6.2.6 Updaterc1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.09% 0.771
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
security@zabbix.com 6.5 2.2 3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
https://support.zabbix.com/browse/ZBX-22002
Patch
Vendor Advisory
Exploit