Lucene search

K
nvd[email protected]NVD:CVE-2023-34121
HistoryJun 13, 2023 - 6:15 p.m.

CVE-2023-34121

2023-06-1318:15:21
CWE-20
web.nvd.nist.gov
cve-2023-34121
input validation
zoom
windows
network access
escalation of privilege

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.

Affected configurations

NVD
Node
zoomroomsRange<5.14.0windows
OR
zoomzoomRange<5.14.0windows
Node
microsoftwindowsMatch-
AND
zoomvirtual_desktop_infrastructureRange<5.14.0

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.6%

Related for NVD:CVE-2023-34121