CVE-2022-43516 Vulnerability Details

  /     /     /  

CVE-2022-43516 Metadata Quick Info

CVE Published: 12/12/2022 | CVE Updated: 16/09/2024 | CVE Year: 2022
Source: Zabbix | Vendor: Zabbix | Product: Zabbix agent (MSI packages)
Status : PUBLISHED

---

CVE-2022-43516 Description

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

Metrics

CVSS Version: 3.1 | Base Score: 6.5 MEDIUM
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

l➤ Exploitability Metrics:
    Attack Vector (AV)* NETWORK
    Attack Complexity (AC)* HIGH
    Privileges Required (PR)* NONE
    User Interaction (UI)* NONE
    Scope (S)* CHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* LOW
    Integrity Impact (I)* LOW
    Availability Impact (A)* LOW

Weakness Enumeration (CWE)

CWE-ID: CWE-16
CWE Name: CWE-16 Configuration
Source: Zabbix

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).