CVE-2024-42332

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

T

he researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host.

References

Link	Resource
https://support.zabbix.com/browse/ZBX-25628	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zabbix:zabbix::::::::
	cpe:2.3:a:zabbix:zabbix::::::::
	cpe:2.3:a:zabbix:zabbix::::::::

History

03 Nov 2025, 22:18

Type	Values Removed	Values Added
References		() https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html -

08 Oct 2025, 15:26

Type	Values Removed	Values Added
CPE		cpe:2.3:a:zabbix:zabbix::::::::
CWE		CWE-116
Summary		(es) El investigador demuestra que, debido a la forma en que se analiza el registro de trampas SNMP, un atacante puede manipular una trampa SNMP con líneas de información adicionales y hacer que los datos falsificados se muestren en la interfaz de usuario de Zabbix. Este ataque requiere que la autenticación SNMP esté desactivada o que el atacante conozca los detalles de la comunidad o la autenticación. El ataque requiere que se configure un elemento SNMP como texto en el host de destino.
References	~~() https://support.zabbix.com/browse/ZBX-25628 -~~	() https://support.zabbix.com/browse/ZBX-25628 - Vendor Advisory
First Time		Zabbix Zabbix zabbix

27 Nov 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-11-27 12:15

Updated : 2025-11-03 22:18

NVD link : CVE-2024-42332

Mitre link : CVE-2024-42332

CVE.ORG link : CVE-2024-42332

JSON object : View

Products Affected

zabbix

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2024-42332", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2024-11-27T12:15:21.240", "references": [{"url": "https://support.zabbix.com/browse/ZBX-25628", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00005.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host."}, {"lang": "es", "value": "El investigador demuestra que, debido a la forma en que se analiza el registro de trampas SNMP, un atacante puede manipular una trampa SNMP con l\u00edneas de informaci\u00f3n adicionales y hacer que los datos falsificados se muestren en la interfaz de usuario de Zabbix. Este ataque requiere que la autenticaci\u00f3n SNMP est\u00e9 desactivada o que el atacante conozca los detalles de la comunidad o la autenticaci\u00f3n. El ataque requiere que se configure un elemento SNMP como texto en el host de destino."}], "lastModified": "2025-11-03T22:18:05.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96EE3C2F-D098-44AC-A330-E7D5C7E29F22", "versionEndExcluding": "6.0.35", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70484B26-B172-4DD5-8C9D-E05C1D533033", "versionEndExcluding": "6.4.20", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1F679BD-7DB5-4B97-8644-C7240727CBF9", "versionEndExcluding": "7.0.3", "versionStartIncluding": "7.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}