title: Zabbix Agent installer adds “allow all TCP any any” firewall rule
description: A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)
problem types: CWE-16 Configuration
affected:
{
vendor: Zabbix
product: Zabbix agent (MSI packages)
versions:
version: Oct. 29, 2022 - Dec 2, 2022, status: affected
version: Dec 3, 2022, status: unaffected, lessThan: unspecified, versionType: custom
}
{
vendor: Zabbix
product: Zabbix agent 2 (MSI packages)
versions:
version: Oct. 29, 2022 - Dec 2, 2022, status: affected
version: Dec 3, 2022, status: unaffected, lessThan: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
]
solutions: To remediate this vulnerability, apply the updates listed in the 'Unaffected' section to appropriate products or use the workaround
workarounds: If an immediate update is not possible, change the applied local firewall rule to allow the agent port only.