DeutschShown in its original language — a full translation is planned for a future version.
Zoom Video Communications Rooms: Mehrere Schwachstellen
view advisory published 2024-08-12
Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Rooms ausnutzen, um Informationen offenzulegen, seine Rechte zu erweitern oder einen Denial-of-Service-Zustand auszulösen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-42442US | high8.8 | — | ||
APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A succes… | ||||
| CVE-2024-42441US | medium6.7 | — | ||
Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privil… | ||||
| CVE-2024-42438US | medium6.5 | — | ||
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-42437US | medium6.5 | — | ||
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-42436US | medium6.5 | — | ||
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-42435US | medium4.9 | — | ||
Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via networ… | ||||
| CVE-2024-42434US | medium4.9OT elevated | — | ||
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. | ||||
| CVE-2024-39825US | high8.5 | — | ||
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access. | ||||
| CVE-2024-39824US | medium4.9OT elevated | — | ||
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. | ||||
| CVE-2024-39823US | medium4.9OT elevated | — | ||
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. | ||||
| CVE-2024-39822US | medium6.5 | — | ||
Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via netw… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2024-1820 - CSAF Versionself
- WID-SEC-2024-1820 - Portal Versionself
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan