Lucene search

ZoomCVE-2021-34415

HistorySep 27, 2021 - 2:15 p.m.

CVE-2021-34415

2021-09-2714:15:08

CWE-770

Zoom

web.nvd.nist.gov

cve-2021-34415

zoom

on-premise

meeting connector

controller

security

vulnerability

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash.

Affected configurations

Nvd

Node

zoommeeting_connectorRange<4.6.358.20210205

VendorProductVersionCPE
zoommeeting_connector*cpe:2.3:a:zoom:meeting_connector:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zoom	meeting_connector	*	cpe:2.3:a:zoom:meeting_connector::::::::

CNA Affected

[
  {
    "product": "Zoom On-Premise Meeting Connector Controller",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "The Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205"
      }
    ]
  }
]

References

explore.zoom.us/en/trust/security/security-bulletin/

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

Related for CVE-2021-34415