Количество 6
Количество 6
CVE-2024-22122
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
CVE-2024-22122
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
CVE-2024-22122
Zabbix allows to configure SMS notifications. AT command injection occ ...
GHSA-m34r-jrv8-mwmv
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
BDU:2024-07007
Уязвимость универсальной системы мониторинга Zabbix, связанная с неправильной нейтрализацией специальных элементов, используемых в команде, позволяющая нарушителю выполнить дополнительные AT-команды на модеме
ROS-20240910-06
Множественные уязвимости zabbix
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22122 Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. | CVSS3: 3 | 2% Низкий | почти 2 года назад |
 | CVE-2024-22122 Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. | CVSS3: 3 | 2% Низкий | почти 2 года назад |
| CVE-2024-22122 Zabbix allows to configure SMS notifications. AT command injection occ ... | CVSS3: 3 | 2% Низкий | почти 2 года назад |
| GHSA-m34r-jrv8-mwmv Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. | CVSS3: 3 | 2% Низкий | почти 2 года назад |
 | BDU:2024-07007 Уязвимость универсальной системы мониторинга Zabbix, связанная с неправильной нейтрализацией специальных элементов, используемых в команде, позволяющая нарушителю выполнить дополнительные AT-команды на модеме | CVSS3: 3 | 2% Низкий | почти 2 года назад |
 | ROS-20240910-06 Множественные уязвимости zabbix | CVSS3: 9.1 | почти 2 года назад |
Уязвимостей на страницу