CVE-2023-26035

Name

CVE-2023-26035

Description

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.

NVD Severity

high

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
MISC	https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-72rg-h4vf-29gr
	http://packetstormsecurity.com/files/175675/ZoneMinder-Snapshots-Command-Injection.html

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:zoneminder:zoneminder::::::::`	zoneminder	>= None	< 1.36.33
`cpe:2.3:a:zoneminder:zoneminder::::::::`	zoneminder	>= 1.37.00	< 1.37.33

References

Match rules

Vulnerable and fixed packages