← CVE Intelligence

CVE-2022-43516

Zabbix Agent installer adds “allow all TCP any any” firewall rule PUBLISHED

Description (CNA)

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

Affected (CNA)

Vendor / productVersions
Zabbix / Zabbix agent (MSI packages)affected Oct. 29, 2022 - Dec 2, 2022; unaffected Dec 3, 2022 before unspecified
Zabbix / Zabbix agent 2 (MSI packages)affected Oct. 29, 2022 - Dec 2, 2022; unaffected Dec 3, 2022 before unspecified

CWE

CWE-16

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.