CVE-2022-43516

Опубликовано: 05 дек. 2022

Источник: nvd

CVSS3: 6.5

CVSS3: 9.8

EPSS Низкий

Описание

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

Ссылки

https://support.zabbix.com/browse/ZBX-22002
Exploit
Patch
Vendor Advisory
https://support.zabbix.com/browse/ZBX-22002
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:windows_firewall:-:*:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*

Версия от 6.0.10 (включая) до 6.0.12 (исключая)

cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*

Версия от 6.2.0 (включая) до 6.2.6 (исключая)

cpe:2.3:a:zabbix:zabbix:6.0.12:rc1:*:*:*:*:*:*

cpe:2.3:a:zabbix:zabbix:6.2.6:rc1:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.0454

Низкий

6.5 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-16

NVD-CWE-Other

Связанные уязвимости

CVE-2022-43516

CVSS3: 6.5

ubuntu

около 3 лет назад

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

CVE-2022-43516

CVSS3: 6.5

debian

около 3 лет назад

A Firewall Rule which allows all incoming TCP connections to all progr ...

GHSA-wpfh-pv35-c3gc

CVSS3: 9.8

github

около 3 лет назад

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

EPSS

Процентиль: 89%

0.0454

Низкий

6.5 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-16

NVD-CWE-Other