CVE-2017-2824 in Serverinfo

Summary

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

12/01/2016

Disclosure

05/24/2017

Entries

1

CPE

ready

CWE

CWE-77

CVSS

7.7

EPSS

0.73548

CTI

0.10

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!