Lucene search

K
nvd[email protected]NVD:CVE-2023-36533
HistoryAug 08, 2023 - 6:15 p.m.

CVE-2023-36533

2023-08-0818:15:14
CWE-400
web.nvd.nist.gov
zoom sdks
uncontrolled resource consumption
denial of service
network access

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

20.5%

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access.

Affected configurations

NVD
Node
zoommeeting_software_development_kitRange<5.14.7android
OR
zoommeeting_software_development_kitRange<5.14.7iphone_os
OR
zoommeeting_software_development_kitRange<5.14.7linux
OR
zoommeeting_software_development_kitRange<5.14.7macos
OR
zoommeeting_software_development_kitRange<5.14.7windows
OR
zoomvideo_software_development_kitRange<5.14.7android
OR
zoomvideo_software_development_kitRange<5.14.7iphone_os
OR
zoomvideo_software_development_kitRange<5.14.7linux
OR
zoomvideo_software_development_kitRange<5.14.7macos
OR
zoomvideo_software_development_kitRange<5.14.7windows

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

20.5%

Related for NVD:CVE-2023-36533