CVE-2024-22122 - Vulnerability Details

Vendors	Products
Zabbix	Zabbix

Link	Providers
https://support.zabbix.com/browse/ZBX-25012

Type	Values Removed	Values Added
First Time appeared		Zabbix Zabbix zabbix
CPEs		cpe:2.3:a:zabbix:zabbix:::::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha1:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha2:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha3:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha4:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha5:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha6:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha7:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha8:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:alpha9:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:beta1:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:beta2:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:beta3:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:rc1:::::: cpe:2.3:a:zabbix:zabbix:7.0.0:rc2::::::
Vendors & Products		Zabbix Zabbix zabbix

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
References	https://support.zabbix.com/browse/ZBX-25001	https://support.zabbix.com/browse/ZBX-25012

Type	Values Removed	Values Added
Description		Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
Title		AT(GSM) Command Injection
Weaknesses		CWE-77
References		https://support.zabbix.com/browse/ZBX-25001
Metrics		cvssV3_1 `{'score': 3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-22122", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "state": "PUBLISHED", "assignerShortName": "Zabbix", "dateReserved": "2024-01-05T07:44:01.395Z", "datePublished": "2024-08-09T08:46:21.444Z", "dateUpdated": "2024-08-09T14:47:01.476Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Server", "Frontend"], "product": "Zabbix", "repo": "https://git.zabbix.com/", "vendor": "Zabbix", "versions": [{"changes": [{"at": "5.0.43rc1", "status": "unaffected"}], "lessThanOrEqual": "5.0.42", "status": "affected", "version": "5.0.0", "versionType": "git"}, {"changes": [{"at": "6.0.31rc1", "status": "unaffected"}], "lessThanOrEqual": "6.0.30", "status": "affected", "version": "6.0.0", "versionType": "git"}, {"changes": [{"at": "6.4.16rc1", "status": "unaffected"}], "lessThanOrEqual": "6.4.15", "status": "affected", "version": "6.4.0", "versionType": "git"}, {"changes": [{"at": "7.0.0rc3", "status": "unaffected"}], "lessThanOrEqual": "7.0.0rc2", "status": "affected", "version": "7.0.0alpha1", "versionType": "git"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Zabbix wants to thank Maksim Tiukov (mf0cuz) who submitted this report in HackerOne bug bounty platform"}], "datePublic": "2024-06-12T11:04:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Zabbix allows to configure SMS notifications. AT command injection occurs on \"Zabbix Server\" because there is no validation of \"Number\" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem."}], "value": "Zabbix allows to configure SMS notifications. AT command injection occurs on \"Zabbix Server\" because there is no validation of \"Number\" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem."}], "impacts": [{"capecId": "CAPEC-253", "descriptions": [{"lang": "en", "value": "CAPEC-253 Remote Code Inclusion"}]}, {"capecId": "CAPEC-664", "descriptions": [{"lang": "en", "value": "CAPEC-664 Server Side Request Forgery"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2024-08-09T13:17:56.611Z"}, "references": [{"url": "https://support.zabbix.com/browse/ZBX-25012"}], "source": {"discovery": "EXTERNAL"}, "title": "AT(GSM) Command Injection", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-09T14:46:40.478878Z", "id": "CVE-2024-22122", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-09T14:47:01.476Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-22122 (string)

assignerOrgId : 72de3e22-0555-4a0d-ae81-9249e0f0a1e8 (string)

state : PUBLISHED (string)

assignerShortName : Zabbix (string)

dateReserved : 2024-01-05T07:44:01.395Z (string)

datePublished : 2024-08-09T08:46:21.444Z (string)

dateUpdated : 2024-08-09T14:47:01.476Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

modules : [ »

0 : Server (string)

1 : Frontend (string)

]

product : Zabbix (string)

repo : https://git.zabbix.com/ (string)

vendor : Zabbix (string)

versions : [ »

0 : { »

changes : [ »

0 : { »

at : 5.0.43rc1 (string)

status : unaffected (string)

}

]

lessThanOrEqual : 5.0.42 (string)

status : affected (string)

version : 5.0.0 (string)

versionType : git (string)

}

1 : { »

changes : [ »

0 : { »

at : 6.0.31rc1 (string)

status : unaffected (string)

}

]

lessThanOrEqual : 6.0.30 (string)

status : affected (string)

version : 6.0.0 (string)

versionType : git (string)

}

2 : { »

changes : [ »

0 : { »

at : 6.4.16rc1 (string)

status : unaffected (string)

}

]

lessThanOrEqual : 6.4.15 (string)

status : affected (string)

version : 6.4.0 (string)

versionType : git (string)

}

3 : { »

changes : [ »

0 : { »

at : 7.0.0rc3 (string)

status : unaffected (string)

}

]

lessThanOrEqual : 7.0.0rc2 (string)

status : affected (string)

version : 7.0.0alpha1 (string)

versionType : git (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

type : reporter (string)

value : Zabbix wants to thank Maksim Tiukov (mf0cuz) who submitted this report in HackerOne bug bounty platform (string)

}

]

datePublic : 2024-06-12T11:04:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. (string)

}

]

value : Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-253 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-253 Remote Code Inclusion (string)

}

]

}

1 : { »

capecId : CAPEC-664 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-664 Server Side Request Forgery (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 3 (number)

baseSeverity : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-77 (string)

description : CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 72de3e22-0555-4a0d-ae81-9249e0f0a1e8 (string)

shortName : Zabbix (string)

dateUpdated : 2024-08-09T13:17:56.611Z (string)

}

references : [ »

0 : { »

url : https://support.zabbix.com/browse/ZBX-25012 (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

title : AT(GSM) Command Injection (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-08-09T14:46:40.478878Z (string)

id : CVE-2024-22122 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-09T14:47:01.476Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-22122", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-09T14:46:40.478878Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-09T14:46:55.706Z"}}], "cna": {"title": "AT(GSM) Command Injection", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Zabbix wants to thank Maksim Tiukov (mf0cuz) who submitted this report in HackerOne bug bounty platform"}], "impacts": [{"capecId": "CAPEC-253", "descriptions": [{"lang": "en", "value": "CAPEC-253 Remote Code Inclusion"}]}, {"capecId": "CAPEC-664", "descriptions": [{"lang": "en", "value": "CAPEC-664 Server Side Request Forgery"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 3, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://git.zabbix.com/", "vendor": "Zabbix", "modules": ["Server", "Frontend"], "product": "Zabbix", "versions": [{"status": "affected", "changes": [{"at": "5.0.43rc1", "status": "unaffected"}], "version": "5.0.0", "versionType": "git", "lessThanOrEqual": "5.0.42"}, {"status": "affected", "changes": [{"at": "6.0.31rc1", "status": "unaffected"}], "version": "6.0.0", "versionType": "git", "lessThanOrEqual": "6.0.30"}, {"status": "affected", "changes": [{"at": "6.4.16rc1", "status": "unaffected"}], "version": "6.4.0", "versionType": "git", "lessThanOrEqual": "6.4.15"}, {"status": "affected", "changes": [{"at": "7.0.0rc3", "status": "unaffected"}], "version": "7.0.0alpha1", "versionType": "git", "lessThanOrEqual": "7.0.0rc2"}], "defaultStatus": "unaffected"}], "datePublic": "2024-06-12T11:04:00.000Z", "references": [{"url": "https://support.zabbix.com/browse/ZBX-25012"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Zabbix allows to configure SMS notifications. AT command injection occurs on \"Zabbix Server\" because there is no validation of \"Number\" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.", "supportingMedia": [{"type": "text/html", "value": "Zabbix allows to configure SMS notifications. AT command injection occurs on \"Zabbix Server\" because there is no validation of \"Number\" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2024-08-09T13:17:56.611Z"}}}, "cveMetadata": {"cveId": "CVE-2024-22122", "state": "PUBLISHED", "dateUpdated": "2024-08-09T14:47:01.476Z", "dateReserved": "2024-01-05T07:44:01.395Z", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "datePublished": "2024-08-09T08:46:21.444Z", "assignerShortName": "Zabbix"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-22122 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-08-09T14:46:40.478878Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-09T14:46:55.706Z (string)

}

]

cna : { »

title : AT(GSM) Command Injection (string)

source : { »

discovery : EXTERNAL (string)

}

credits : [ »

0 : { »

lang : en (string)

type : reporter (string)

value : Zabbix wants to thank Maksim Tiukov (mf0cuz) who submitted this report in HackerOne bug bounty platform (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-253 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-253 Remote Code Inclusion (string)

}

]

}

1 : { »

capecId : CAPEC-664 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-664 Server Side Request Forgery (string)

}

]

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 3 (number)

attackVector : NETWORK (string)

baseSeverity : LOW (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : NONE (string)

privilegesRequired : HIGH (string)

confidentialityImpact : NONE (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

repo : https://git.zabbix.com/ (string)

vendor : Zabbix (string)

modules : [ »

0 : Server (string)

1 : Frontend (string)

]

product : Zabbix (string)

versions : [ »

0 : { »

status : affected (string)

changes : [ »

0 : { »

at : 5.0.43rc1 (string)

status : unaffected (string)

}

]

version : 5.0.0 (string)

versionType : git (string)

lessThanOrEqual : 5.0.42 (string)

}

1 : { »

status : affected (string)

changes : [ »

0 : { »

at : 6.0.31rc1 (string)

status : unaffected (string)

}

]

version : 6.0.0 (string)

versionType : git (string)

lessThanOrEqual : 6.0.30 (string)

}

2 : { »

status : affected (string)

changes : [ »

0 : { »

at : 6.4.16rc1 (string)

status : unaffected (string)

}

]

version : 6.4.0 (string)

versionType : git (string)

lessThanOrEqual : 6.4.15 (string)

}

3 : { »

status : affected (string)

changes : [ »

0 : { »

at : 7.0.0rc3 (string)

status : unaffected (string)

}

]

version : 7.0.0alpha1 (string)

versionType : git (string)

lessThanOrEqual : 7.0.0rc2 (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2024-06-12T11:04:00.000Z (string)

references : [ »

0 : { »

url : https://support.zabbix.com/browse/ZBX-25012 (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-77 (string)

description : CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : 72de3e22-0555-4a0d-ae81-9249e0f0a1e8 (string)

shortName : Zabbix (string)

dateUpdated : 2024-08-09T13:17:56.611Z (string)

}

cveMetadata : { »

cveId : CVE-2024-22122 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-09T14:47:01.476Z (string)

dateReserved : 2024-01-05T07:44:01.395Z (string)

assignerOrgId : 72de3e22-0555-4a0d-ae81-9249e0f0a1e8 (string)

datePublished : 2024-08-09T08:46:21.444Z (string)

assignerShortName : Zabbix (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "matchCriteriaId": "D5950D0D-9DFF-4B36-9AAF-43CBCEFE7101", "versionEndIncluding": "5.0.42", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1D26F5C-A94F-4273-81D7-7DDF7541C3E7", "versionEndIncluding": "6.0.30", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "matchCriteriaId": "E0DA6900-EB3E-4867-BD97-243686EECADD", "versionEndIncluding": "6.4.15", "versionStartIncluding": "6.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "93EB5757-7F98-4428-9616-C30A647A6612", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha2:*:*:*:*:*:*", "matchCriteriaId": "DA00BDB5-433F-44E5-87AC-DA01C64B5DB3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha3:*:*:*:*:*:*", "matchCriteriaId": "98C46C92-9D86-45CD-88FE-DFBB5502BB88", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha4:*:*:*:*:*:*", "matchCriteriaId": "B568E6DD-A6D1-4402-BB40-7DA2596A5BC8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha5:*:*:*:*:*:*", "matchCriteriaId": "B9C3673B-8459-4C63-8E90-724D1D42A8BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha6:*:*:*:*:*:*", "matchCriteriaId": "7C9F6957-7526-4852-A579-DE556DBFAA97", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha7:*:*:*:*:*:*", "matchCriteriaId": "81A7A191-93DE-4C5D-963E-E8890FF7AACA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha8:*:*:*:*:*:*", "matchCriteriaId": "AEE202D5-3C88-43A5-9328-FC78D0B9B8CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:alpha9:*:*:*:*:*:*", "matchCriteriaId": "F88BFB75-7951-47D5-941F-3839E9E31FFA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "8216247E-C160-4D2C-906E-9D8CD731B5C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "06548219-0DC3-4B5B-85D1-B1EE0FA30CD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "4D23985B-2F4D-41F6-B9D6-7B184FC7E447", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "97964B9B-6A5E-4547-8886-E81B0849A876", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix:7.0.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "40992B5F-0D83-4D5C-9188-E84C369FF92F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Zabbix allows to configure SMS notifications. AT command injection occurs on \"Zabbix Server\" because there is no validation of \"Number\" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem."}, {"lang": "es", "value": "Zabbix permite configurar notificaciones por SMS. La inyecci\u00f3n del comando AT ocurre en el \"Servidor Zabbix\" porque no hay validaci\u00f3n del campo \"N\u00famero\" en la Web ni en el lado del servidor Zabbix. El atacante puede ejecutar una prueba de SMS proporcionando un n\u00famero de tel\u00e9fono especialmente manipulado y ejecutar comandos AT adicionales en el m\u00f3dem."}], "id": "CVE-2024-22122", "lastModified": "2024-12-10T19:21:09.207", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.0, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 1.4, "source": "security@zabbix.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-08-12T13:38:16.310", "references": [{"source": "security@zabbix.com", "tags": ["Vendor Advisory"], "url": "https://support.zabbix.com/browse/ZBX-25012"}], "sourceIdentifier": "security@zabbix.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "security@zabbix.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D5950D0D-9DFF-4B36-9AAF-43CBCEFE7101 (string)

versionEndIncluding : 5.0.42 (string)

versionStartIncluding : 5.0.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D1D26F5C-A94F-4273-81D7-7DDF7541C3E7 (string)

versionEndIncluding : 6.0.30 (string)

versionStartIncluding : 6.0.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E0DA6900-EB3E-4867-BD97-243686EECADD (string)

versionEndIncluding : 6.4.15 (string)

versionStartIncluding : 6.4.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha1:*:*:*:*:*:* (string)

matchCriteriaId : 93EB5757-7F98-4428-9616-C30A647A6612 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha2:*:*:*:*:*:* (string)

matchCriteriaId : DA00BDB5-433F-44E5-87AC-DA01C64B5DB3 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha3:*:*:*:*:*:* (string)

matchCriteriaId : 98C46C92-9D86-45CD-88FE-DFBB5502BB88 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha4:*:*:*:*:*:* (string)

matchCriteriaId : B568E6DD-A6D1-4402-BB40-7DA2596A5BC8 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha5:*:*:*:*:*:* (string)

matchCriteriaId : B9C3673B-8459-4C63-8E90-724D1D42A8BB (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha6:*:*:*:*:*:* (string)

matchCriteriaId : 7C9F6957-7526-4852-A579-DE556DBFAA97 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha7:*:*:*:*:*:* (string)

matchCriteriaId : 81A7A191-93DE-4C5D-963E-E8890FF7AACA (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha8:*:*:*:*:*:* (string)

matchCriteriaId : AEE202D5-3C88-43A5-9328-FC78D0B9B8CF (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:alpha9:*:*:*:*:*:* (string)

matchCriteriaId : F88BFB75-7951-47D5-941F-3839E9E31FFA (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:beta1:*:*:*:*:*:* (string)

matchCriteriaId : 8216247E-C160-4D2C-906E-9D8CD731B5C2 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:beta2:*:*:*:*:*:* (string)

matchCriteriaId : 06548219-0DC3-4B5B-85D1-B1EE0FA30CD2 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:beta3:*:*:*:*:*:* (string)

matchCriteriaId : 4D23985B-2F4D-41F6-B9D6-7B184FC7E447 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:rc1:*:*:*:*:*:* (string)

matchCriteriaId : 97964B9B-6A5E-4547-8886-E81B0849A876 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:zabbix:zabbix:7.0.0:rc2:*:*:*:*:*:* (string)

matchCriteriaId : 40992B5F-0D83-4D5C-9188-E84C369FF92F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. (string)

}

1 : { »

lang : es (string)

value : Zabbix permite configurar notificaciones por SMS. La inyección del comando AT ocurre en el "Servidor Zabbix" porque no hay validación del campo "Número" en la Web ni en el lado del servidor Zabbix. El atacante puede ejecutar una prueba de SMS proporcionando un número de teléfono especialmente manipulado y ejecutar comandos AT adicionales en el módem. (string)

}

]

id : CVE-2024-22122 (string)

lastModified : 2024-12-10T19:21:09.207 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 3 (number)

baseSeverity : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.3 (number)

impactScore : 1.4 (number)

source : security@zabbix.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.1 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-08-12T13:38:16.310 (string)

references : [ »

0 : { »

source : security@zabbix.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.zabbix.com/browse/ZBX-25012 (string)

}

]

sourceIdentifier : security@zabbix.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : security@zabbix.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object