medium4.6
CVE-2023-32728
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote …
Impact
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix-Agent2 | from 5.0.0 through 5.0.38 from 6.0.0 through 6.0.23 from 6.4.0 through 6.4.8 Version 7.0.0 |