CVE-2024-22123
Published: Aug 9, 2024
Modified: Nov 3, 2025
CVSS v3.1
2.7
Description
Setting SMS media allows to set GSM modem file. Later this file is used as Linux device. But due everything is a file for Linux, it is possible to set another file, e.g. log file and zabbix_server will try to communicate with it as modem. As a result, log file will be broken with AT commands and small part for log file content will be leaked to UI.
| Vendor | Product | Versions |
|---|---|---|
Zabbix | Zabbix | affected 5.0.0 - <= 5.0.42affected 6.0.0 - <= 6.0.30affected 6.4.0 - <= 6.4.15affected 7.0.0alpha1 - <= 7.0.0rc2 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now