Lucene search
HistoryAug 08, 2023 - 6:15 p.m.
CVE-2023-39217
zoom sdk
input validation
denial of service
unauthenticated user
network access
cve-2023-39217
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.5%
Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.
Affected configurations
Node
zoommeeting_software_development_kitRange<5.14.10android
ORzoommeeting_software_development_kitRange<5.14.10iphone_os
ORzoommeeting_software_development_kitRange<5.14.10linux
ORzoommeeting_software_development_kitRange<5.14.10macos
ORzoommeeting_software_development_kitRange<5.14.10windows
ORzoomvideo_software_development_kitRange<5.14.10android
ORzoomvideo_software_development_kitRange<5.14.10iphone_os
ORzoomvideo_software_development_kitRange<5.14.10linux
ORzoomvideo_software_development_kitRange<5.14.10macos
ORzoomvideo_software_development_kitRange<5.14.10windows
Related
cvelist
cvelist
CVE-2023-39217
2023-08-08 17:49:38
prion
prion
Input validation
2023-08-08 18:15:00
cve
cve
CVE-2023-39217
2023-08-08 18:15:23
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.5%
Related for NVD:CVE-2023-39217