PT-2025-37304
CVE-2025-27234
·
Published
2025-01-01
·
Updated
2026-02-08
Description by
CVSS 2.0
7.7
HighMetricsAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Zabbix Agent 2 versions 5.0 and earlier
Description:
The Zabbix Agent 2 smartctl plugin does not properly sanitize
smart.disk.get parameters, potentially allowing an attacker to inject unexpected arguments into the smartctl command. This can lead to remote code execution.Recommendations:
Update Zabbix Agent 2 to a version later than 5.0.
Found an issue in the description? Have something to add? Feel free to write us 👾