Zabbix Agent installer adds “allow all TCP any any” firewall rule
CVE-2022-43516

6.5MEDIUM

Key Information:

Vendor

Zabbix

Status
Zabbix Agent (msi Packages)
Zabbix Agent 2 (msi Packages)
Vendor
CVE Published:
5 December 2022

What is CVE-2022-43516?

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

Affected Version(s)

Zabbix agent (MSI packages) Oct. 29, 2022 - Dec 2, 2022

Zabbix agent 2 (MSI packages) Oct. 29, 2022 - Dec 2, 2022

Zabbix agent (MSI packages) Dec 3, 2022

References

https://support.zabbix.com/browse/ZBX-22002

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joshua PowellNishiyama
.
The Cyber Security Vulnerability Database.