CVE-2023-32728 Code injection in zabbix_agent2 smart.disk.get caused by smartctl plugin

2023-12-1809:19:51

CWE-20

Zabbix

raw.githubusercontent.com

zabbix agent2

code injection

smartctl plugin

remote code execution

vulnerability

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.2%

JSON

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.