Zoom Rooms for iPhone OS

CPE Details

Zoom Rooms for iPhone OS
zoom
rooms
-
2022-11-16
11h01 +00:00
2022-11-17
16h14 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:zoom:rooms:-:*:*:*:*:iphone_os:*:*

Informations

Vendor

zoom

Product

rooms

Version

-

Target Software

iphone_os

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-24690 2024-02-14 00h00 +00:00 Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
6.5
Moyen
CVE-2024-24699 2024-02-13 23h58 +00:00 Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.
6.5
Moyen
CVE-2024-24697 2024-02-13 23h53 +00:00 Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.
7.8
Haute
CVE-2023-28597 2023-03-27 00h00 +00:00 Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables. This could result in an attacker gaining access to a user's device and data, and remote code execution.
8.3
Haute
CVE-2022-28764 2022-11-14 20h17 +00:00 The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.
3.3
Bas
CVE-2021-34409 2021-09-27 13h55 +00:00 It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before version 5.1.0, copy pre- and post- installation shell scripts to a user-writable directory. In the affected products listed below, a malicious actor with local access to a user's machine could use this flaw to potentially run arbitrary system commands in a higher privileged context during the installation process.
7.8
Haute