CVE-2021-34417

🗓️ 11 Nov 2021 23:00:03Reported by ZoomType

The network proxy page on the Zoom On-Premise Controller & Connectors web portal before v4.6.365.20210703 allows remote command injection

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2021-34417	12 Nov 202102:38	–	circl
CNNVD	Zoom 多款产品输入验证错误漏洞	11 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-34417 Authenticated remote command execution with root privileges via web console in MMR	11 Nov 202123:00	–	cvelist
EUVD	EUVD-2021-21075	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Zoom	15 Nov 202100:00	–	ncsc
NVD	CVE-2021-34417	11 Nov 202123:15	–	nvd
Prion	Command injection	11 Nov 202123:15	–	prion

NVD

Node

zoom zoom_on-premise_meeting_connector_controllerRange<4.6.365.20210703

zoom zoom_on-premise_meeting_connector_mmrRange<4.6.365.20210703

zoom zoom_on-premise_recording_connectorRange<3.8.45.20210703

zoom zoom_on-premise_virtual_room_connectorRange<4.4.6868.20210703

zoom zoom_on-premise_virtual_room_connector_load_balancerRange<2.5.5496.20210703

[
  {
    "product": "Zoom On-Premise Meeting Connector Controller",
    "vendor": "Zoom Video Communications Inc",
    "versions": [
      {
        "lessThan": "4.6.365.20210703",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Zoom On-Premise Meeting Connector MMR",
    "vendor": "Zoom Video Communications Inc",
    "versions": [
      {
        "lessThan": "4.6.365.20210703",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Zoom On-Premise Recording Connector",
    "vendor": "Zoom Video Communications Inc",
    "versions": [
      {
        "lessThan": "3.8.45.20210703",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Zoom On-Premise Virtual Room Connector",
    "vendor": "Zoom Video Communications Inc",
    "versions": [
      {
        "lessThan": "4.4.6868.20210703",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Zoom On-Premise Virtual Room Connector Load Balancer",
    "vendor": "Zoom Video Communications Inc",
    "versions": [
      {
        "lessThan": "2.5.5496.20210703",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
explore	www.explore.zoom.us/en/trust/security/security-bulletin

21 Nov 2024 06:10Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.2 - 7.9

CVSS 29

EPSS0.00363

CWE-20