VYPR
← All advisories
Critical severity9.9NVD Advisory· Published Aug 12, 2024· Updated Jun 17, 2026

CVE-2024-22116

CVE-2024-22116

Description

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Zabbix/Zabbixv516 versions
    6.4.9+ 15 more
    • (no CPE)range: 6.4.9
    • cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*range: >=6.4.9,<=6.4.15
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha3:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha4:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha5:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha6:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha7:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha8:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:alpha9:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:7.0.0:rc2:*:*:*:*:*:*
  • Zabbix/Monitoring Hostsllm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.

CVE-2024-22116 · Critical · VYPR