CVE-2023-39212

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Aug 8, 2023
Updated: Aug 15, 2023
CWE ID 426
CWE ID 144

Summary

CVE-2023-39212 is a vulnerability affecting Zoom Rooms for Windows prior to version 5.15.5. An authenticated user can exploit this untrusted search path issue to cause a denial of service. By manipulating the application's search path, the attacker can gain local access and trigger the DoS condition, disrupting the normal functioning of the software. This vulnerability poses a risk to organizations using the affected version of Zoom Rooms for Windows and should be addressed promptly by updating to the latest patch.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Zoom Rooms

Affected Vendors

  • Zoom Video Communications, Inc