CVE-2022-22783: falha de média gravidade em Zoom On-Premise Meeting Connector Controller
Process memory exposure in Zoom on-premise Meeting services
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Zoom On-Premise Meeting Connector MMR+ Monitorar Zoom On-Premise Meeting Connector Controller
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 1.0%
A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Zoom Video Communications Inc · Zoom On-Premise Meeting Connector ControllerZoom Video Communications Inc · Zoom On-Premise Meeting Connector MMRCVEs relacionadas — Zoom On-Premise Meeting Connector Controller
No mesmo produto, das mais perigosas para as menos.
CVE-2021-34423HIGHBuffer overflow in Zoom client and other productsEPSS 3.3%CVE-2021-34417HIGHAuthenticated remote command execution with root privileges via web console in MMREPSS 1.2%CVE-2022-28761MEDIUMZoom On-Premise Deployments: Improper Access ControlEPSS 0.8%CVE-2022-28758HIGHZoom On-Premise Deployments: Improper Access ControlEPSS 0.7%CVE-2022-28759HIGHZoom On-Premise Deployments: Improper Access ControlEPSS 0.7%CVE-2022-28760MEDIUMZoom On-Premise Deployments: Improper Access ControlEPSS 0.6%