Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

web_app:zabbix_unauthorized_access_vul（Rule ID：1070210516）

Release Date：2025/9/15

Rule Name：CVE-2022-23134:Zabbix setup.php Unauthorized Access Vulnerability

Severity：mid

CVE ID：CVE-2022-23134

Descripiton：

Zabbix is an open source monitoring system of Zabbix Company. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. Zabbix has an authorization vulnerability. The vulnerability originates from that after the initial setting process, some steps of the setup.php file can be accessed not only by super administrators, but also by unauthenticated users.This rule supports to defend the A6: Vulnerabe and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.