CVE-2024-22123

Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)

Description The issue is related to incorrect code generation control in the Zabbix monitoring system. It allows a remote attacker to execute arbitrary code. Setting SMS media allows configuring a GSM modem file, which is later used as a Linux device. However, since everything is a file in Linux, it is possible to configure another file, such as a log file, and the zabbix server will attempt to communicate with it as a modem. As a result, the log file will be broken with AT commands, and a small part of the log file content will be leaked to the UI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.