← CVE Intelligence

CVE-2024-22116

Remote code execution within ping script PUBLISHED

Description (CNA)

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure.

Affected (CNA)

Vendor / productVersions
Zabbix / Zabbixaffected 6.4.9 through 6.4.15; affected 7.0.0alpha1 through 7.0.0rc2

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.