BaseFortify

Publication date: 2025-10-03

Last updated on: 2025-10-06

Assigner: Zabbix

Description

In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-03

Last Modified

2025-10-06

Generated

2026-07-06

AI Q&A

2025-10-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-27237

Affected Vendors & Products

Vendor	Product	Version / Range
zabbix	zabbix_agent	4.0
zabbix	zabbix_agent_2	4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Zabbix Agent and Agent 2 on Windows, where the OpenSSL configuration file is loaded from a path that low-privileged users can write to. This allows an attacker with local access to modify the configuration file maliciously, potentially injecting a DLL that leads to local privilege escalation.

Impact Analysis

The vulnerability can allow a local attacker with limited privileges to escalate their privileges on the affected system by modifying the OpenSSL configuration file to inject a malicious DLL. This could lead to unauthorized actions being performed with higher privileges, compromising system security.

Hi! I’m here to help you understand CVE-2025-27237. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70