DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Zoom Video Communications Rooms: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-08-12
Ein Angreifer kann mehrere Schwachstellen in Zoom Video Communications Rooms ausnutzen, um Informationen offenzulegen, seine Rechte zu erweitern oder einen Denial-of-Service-Zustand auszulösen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-42442US | high8.8 | — | ||
APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A succes… | ||||
| CVE-2024-42441US | medium6.7 | — | ||
Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privil… | ||||
| CVE-2024-42438US | medium6.5 | — | ||
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-42437US | medium6.5 | — | ||
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-42436US | medium6.5 | — | ||
Buffer overflow in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2024-42435US | medium4.9 | — | ||
Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via networ… | ||||
| CVE-2024-42434US | medium4.9OT erhöht | — | ||
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. | ||||
| CVE-2024-39825US | high8.5 | — | ||
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access. | ||||
| CVE-2024-39824US | medium4.9OT erhöht | — | ||
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. | ||||
| CVE-2024-39823US | medium4.9OT erhöht | — | ||
Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access. | ||||
| CVE-2024-39822US | medium6.5 | — | ||
Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via netw… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- WID-SEC-W-2024-1820 - CSAF Versionself
- WID-SEC-2024-1820 - Portal Versionself
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
- Zoom Security Bulletin vom 2024-08-12external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan