CVE-2021-34417high

CVE-2021-34417: falha de alta gravidade em Zoom On-Premise Meeting Connector Controller

Authenticated remote command execution with root privileges via web console in MMR

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Zoom On-Premise Meeting Connector MMR+ Monitorar Zoom On-Premise Recording Connector

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.9epss 1.2%
The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Recording Connector before version 3.8.45.20210703, Zoom On-Premise Virtual Room Connector before version 4.4.6868.20210703, and Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5496.20210703 fails to validate input sent in requests to set the network proxy password. This could lead to remote command injection by a web portal administrator.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Produtos afetados
Zoom Video Communications Inc · Zoom On-Premise Meeting Connector ControllerZoom Video Communications Inc · Zoom On-Premise Meeting Connector MMRZoom Video Communications Inc · Zoom On-Premise Recording ConnectorZoom Video Communications Inc · Zoom On-Premise Virtual Room ConnectorZoom Video Communications Inc · Zoom On-Premise Virtual Room Connector Load Balancer
CVEs relacionadas — Zoom On-Premise Meeting Connector Controller

No mesmo produto, das mais perigosas para as menos.

CVE-2021-34423HIGHBuffer overflow in Zoom client and other productsEPSS 3.3%CVE-2022-22783MEDIUMProcess memory exposure in Zoom on-premise Meeting servicesEPSS 1.0%CVE-2022-28761MEDIUMZoom On-Premise Deployments: Improper Access ControlEPSS 0.8%CVE-2022-28758HIGHZoom On-Premise Deployments: Improper Access ControlEPSS 0.7%CVE-2022-28759HIGHZoom On-Premise Deployments: Improper Access ControlEPSS 0.7%CVE-2022-28760MEDIUMZoom On-Premise Deployments: Improper Access ControlEPSS 0.6%