Lucene search

K
cvelistZoomCVELIST:CVE-2024-24693
HistoryMar 13, 2024 - 7:30 p.m.

CVE-2024-24693 Zoom Rooms Client for Windows - Improper Access Control

2024-03-1319:30:22
CWE-379
Zoom
www.cve.org
4
cve-2024-24693
zoom
access control
windows
denial of service
local access

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Zoom Rooms Client for Windows",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "before version 5.17.5"
      }
    ]
  }
]

CVSS3

7.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-24693