High severity · published Aug 14, 2024
CVE-2024-39825
Zoom Workplace Apps and Rooms Clients - Buffer Overflow
8.5
CVSS
0.6%
EPSS
No
On KEV
Description
Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZW
Zoom Workplace Apps and Rooms Clients · Zoom Communications Inc.
see references · source: vendor
RO
Rooms · Zoom
before 6.0.0; before 6.0.0; before 6.0.0 · source: NVD, CISA
WO
Workplace · Zoom
before 6.0.0; before 6.0.0 · source: NVD
WD
Workplace Desktop · Zoom
before 6.0.0; before 6.0.0; before 6.0.0 · source: NVD, CISA
WV
Workplace Virtual Desktop Infrastructure · Zoom
before 5.17.13 · source: NVD
VW
Vdi Windows Meeting Client · Zoom
before 5.17.13; before 5.17.13 · source: CISA
WA
Workplace App · Zoom
before 6.0.0; before 6.0.0 · source: CISA
Affected product
ZW
Zoom Workplace Apps and Rooms Clients
Zoom Communications Inc.