Question 1

What is CVE-2013-6824?

Accepted Answer

CVE-2013-6824 is a high-severity software vulnerability (Code injection) with a CVSS score of 7.5. Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.

Question 2

Is CVE-2013-6824 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

Question 3

What products does CVE-2013-6824 affect?

Accepted Answer

Tracked products affected include Zabbix. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2013-6824?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2013-6824

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information