CVE-2024-42332

The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.zabbix.com/browse/ZBX-25628	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zabbix:zabbix::::::::
	cpe:2.3:a:zabbix:zabbix::::::::
	cpe:2.3:a:zabbix:zabbix::::::::

History

08 Oct 2025, 15:26

Type	Values Removed	Values Added
References	~~() https://support.zabbix.com/browse/ZBX-25628 -~~	() https://support.zabbix.com/browse/ZBX-25628 - Vendor Advisory
Summary		(es) El investigador demuestra que, debido a la forma en que se analiza el registro de trampas SNMP, un atacante puede manipular una trampa SNMP con líneas de información adicionales y hacer que los datos falsificados se muestren en la interfaz de usuario de Zabbix. Este ataque requiere que la autenticación SNMP esté desactivada o que el atacante conozca los detalles de la comunidad o la autenticación. El ataque requiere que se configure un elemento SNMP como texto en el host de destino.
CPE		cpe:2.3:a:zabbix:zabbix::::::::
CWE		CWE-116
First Time		Zabbix Zabbix zabbix

27 Nov 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-11-27 12:15

Updated : 2025-10-08 15:26

NVD link : CVE-2024-42332

Mitre link : CVE-2024-42332

CVE.ORG link : CVE-2024-42332

JSON object : View

Products Affected

zabbix

zabbix

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2024-42332", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@zabbix.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2024-11-27T12:15:21.240", "references": [{"url": "https://support.zabbix.com/browse/ZBX-25628", "tags": ["Vendor Advisory"], "source": "security@zabbix.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attack requires an SNMP item to be configured as text on the target host."}, {"lang": "es", "value": "El investigador demuestra que, debido a la forma en que se analiza el registro de trampas SNMP, un atacante puede manipular una trampa SNMP con l\u00edneas de informaci\u00f3n adicionales y hacer que los datos falsificados se muestren en la interfaz de usuario de Zabbix. Este ataque requiere que la autenticaci\u00f3n SNMP est\u00e9 desactivada o que el atacante conozca los detalles de la comunidad o la autenticaci\u00f3n. El ataque requiere que se configure un elemento SNMP como texto en el host de destino."}], "lastModified": "2025-10-08T15:26:21.027", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96EE3C2F-D098-44AC-A330-E7D5C7E29F22", "versionEndExcluding": "6.0.35", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70484B26-B172-4DD5-8C9D-E05C1D533033", "versionEndExcluding": "6.4.20", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1F679BD-7DB5-4B97-8644-C7240727CBF9", "versionEndExcluding": "7.0.3", "versionStartIncluding": "7.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@zabbix.com"}