Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-43516

Zabbix Agent installer adds “allow all TCP any any” firewall rule

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix agent (MSI packages)

  • Oct. 29, 2022 - Dec 2, 2022affected
  • Dec 3, 2022 to < unspecifiedunaffected

Zabbix Zabbix agent 2 (MSI packages)

  • Oct. 29, 2022 - Dec 2, 2022affected
  • Dec 3, 2022 to < unspecifiedunaffected

References