← Back

CVE-2022-43516

nvd nist
Published: Dec 5, 2022Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

Affected (5)

Microsoft
1 product
Windows Firewall
Zabbix
1 product
Zabbix
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Windows Firewall
All versions
Zabbix
Zabbix
From 6.0.10 to 6.0.12
Zabbix
From 6.2.0 to 6.2.6
Zabbix
Version 6.0.12 rc1
Zabbix
Version 6.2.6 rc1

Related CWEs

CWE-16
CWE-16

References (2)

Source: security@zabbix.com
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory

Timeline

No history available yet.