An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.
[
{
"product": "Zabbix Server",
"vendor": "Zabbix",
"versions": [
{
"status": "affected",
"version": "2.4.8.r1"
}
]
}
]