CVE-2022-43516

MEDIUM

Zabbix 6.0.10-6.0.12 - Unauthenticated Firewall Rule Bypass via Windows Firewall MSI Installation

Title source: llm
STIX 2.1

Description

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

References (1)

Core 1
Core References
Exploit, Patch, Vendor Advisory
https://support.zabbix.com/browse/ZBX-22002

Scores

CVSS v3 6.5
EPSS 0.0091
EPSS Percentile 56.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-16
Status published
Products (4)
microsoft/windows_firewall
zabbix/zabbix 6.0.12 rc1
zabbix/zabbix 6.2.6 rc1
zabbix/zabbix 6.0.10 - 6.0.12
Published Dec 05, 2022
Tracked Since Feb 18, 2026