Description
Zabbix SIA Zabbix是拉脱维亚Zabbix SIA公司的一套开源的监控系统。 Zabbix SIA zabbix3-proxy 3.0.31之前版本和zabbix3-server 3.0.31之前版本中存在安全漏洞。攻击者可利用该漏洞执行任意代码/命令。
Zabbix 存在远程命令执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://support.zabbix.com/browse/ZBX-25016
https://www.stormshield.com/news/security-alert-zabbix-cve-2024-22116-stormshield-products-response/
https://nvd.nist.gov/vuln/detail/CVE-2024-22116
https://github.com/godylockz/CVE-2024-42327
https://www.exploit-db.com/exploits/50816
https://horizon3.ai/attack-research/disclosures/cve-2021-27927-csrf-to-rce-chain-in-zabbix/
https://www.tenable.com/plugins/nessus/102530
https://medium.com/@0x616163/pivoting-with-devops-tools-abusing-zabbix-877e92bf49c2
https://blog.vyos.io/remote-code-execution-in-listening-zabbix-agent-cve-2023-32728
https://www.rapid7.com/db/modules/exploit/multi/http/zabbix_script_exec/