Vulnerability Bulletins |
CVE-2025-27233 |
|
| Affected software | ZABBIX |
| Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-27233 | |