An exploitable code execution vulnerability exists in the trapper command functionality of zabbix-agent Server 2.4.X. A specially crafted set of packet scan cause a command injection result ing in remote code execution. An attacker can make requests from an active zabbix-agent Proxy to trigger this vulnerability.