Lucene search

K
redosRedosROS-20240611-05
HistoryJun 11, 2024 - 12:00 a.m.

ROS-20240611-05

2024-06-1100:00:00
redos.red-soft.ru
2
zabbix workstation
server vulnerability
remote code execution
sql injection
input data processing
unix

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

The vulnerability of the Zabbix Workstation universal monitoring system server is related to errors in input data processing.
of input data. Exploitation of the vulnerability could allow a remote attacker to execute an arbitrary code by injecting a specially crafted SQL query.
arbitrary code by injecting a specially crafted SQL query

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64zabbix<= 6.4.13-1UNKNOWN

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%