PT-2022-26952 · Microsoft+2 · Windows Firewall+3

Joshua Powell + 1 · Published 2022-12-05 · Updated 2022-12-30 · CVE-2022-43516

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zabbix agent (affected versions not specified)

Description A Firewall Rule is created in Windows Firewall after Zabbix agent installation, allowing all incoming TCP connections to all programs from any source and to all ports.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-16

Related Identifiers

ALT-PU-2022-3293

ALT-PU-2022-3444

CVE-2022-43516

Affected Products

Alt Linux

Windows Firewall

Zabbix

Zabbix Agent

References · 8

• 🔥 https://support.zabbix.com/browse/ZBX-22002 · Exploit
• https://ubuntu.com/security/CVE-2022-43516 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-43516 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-43516 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-43516 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43516 · Vendor Advisory
• https://t.me/cibsecurity/54015 · Telegram Post
• https://t.me/cvenotify/39168 · Telegram Post