What is CVE-2023-32727?

CVE-2023-32727 is a medium-severity vulnerability in Zabbix, classified under Improper Input Validation. CVSS score: 6.8/10. Published 2023-12-18.

How severe is CVE-2023-32727?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Improper input validation in Zabbix

CVE-2023-32727

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.009 (54.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H.

Affected products

Zabbix — versions 4.0.0, 5.0.0 , 6.0.0
Zabbix Zabbix_server — versions 7.0.0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

security@zabbix.com (Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2023-32727?: CVE-2023-32727 is a medium-severity vulnerability in Zabbix, classified under Improper Input Validation. CVSS score: 6.8/10. Published 2023-12-18.
How severe is CVE-2023-32727?: Medium severity. CVSS v3 base score is 6.8 out of 10.