VULNERABILITY INTELLIGENCE

CVE-2023-32727

CVSS score6.8 MEDIUM
EPSS probability0.87%
CISA KEVNot currently listed
Published2023-12-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

Weakness classification

  • security@zabbix.com: CWE-20
  • nvd@nist.gov: CWE-20

Primary references