CyberRota Analysis
AI-GeneratedA remote code execution vulnerability in Zimbra Collaboration Server prior to version 10.1.20 affects systems with the optional zimbra-snmp package installed and SNMP notifications enabled. This flaw allows unauthenticated attackers to exploit improper input sanitization during SNMP notification processing, potentially executing arbitrary operating system commands as the Zimbra user. Organizations using affected versions of Zimbra should prioritize patching to mitigate the risk of unauthorized command execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.