CVE-2022-43516: Zabbix Agent installer adds “allow all TCP any any” firewall rule
First published: Wed Nov 30 2022(Updated: )
A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)
Credit: security@zabbix.com security@zabbix.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows Firewall | ||
| Zabbix Server | >=6.0.10<6.0.12 | |
| Zabbix Server | >=6.2.0<6.2.6 | |
| Zabbix Server | =6.0.12-rc1 | |
| Zabbix Server | =6.2.6-rc1 |
Remedy
To remediate this vulnerability, apply the updates listed in the 'Unaffected' section to appropriate products or use the workaround
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-43516?
CVE-2022-43516 is a vulnerability that allows all incoming TCP connections to all programs from any source and to all ports in Windows Firewall after Zabbix agent installation.
How does CVE-2022-43516 affect Microsoft Windows Firewall?
CVE-2022-43516 affects Microsoft Windows Firewall by creating a Firewall Rule that allows all incoming TCP connections to all programs from any source and to all ports after Zabbix agent installation.
What is the severity of CVE-2022-43516?
The severity of CVE-2022-43516 is critical, with a severity value of 9.8.
How does CVE-2022-43516 affect Zabbix Zabbix versions 6.0.10 to 6.0.12?
CVE-2022-43516 affects Zabbix Zabbix versions 6.0.10 to 6.0.12 by creating a Firewall Rule that allows all incoming TCP connections to all programs from any source and to all ports in Windows Firewall after Zabbix agent installation.
How does CVE-2022-43516 affect Zabbix Zabbix versions 6.2.0 to 6.2.6?
CVE-2022-43516 affects Zabbix Zabbix versions 6.2.0 to 6.2.6 by creating a Firewall Rule that allows all incoming TCP connections to all programs from any source and to all ports in Windows Firewall after Zabbix agent installation.
How can I fix CVE-2022-43516?
To fix CVE-2022-43516, you should update Zabbix to a version that is not affected by the vulnerability and remove the Firewall Rule manually.
- agent/type
- agent/weakness
- agent/title
- agent/references
- agent/remedy
- agent/severity
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/microsoft
- canonical/microsoft windows firewall
- vendor/zabbix
- canonical/zabbix server
- version/zabbix server/6.0.10
- version/zabbix server/6.2.0
- version/zabbix server/6.0.12-rc1
- version/zabbix server/6.2.6-rc1