CVE-2023-39217
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-39217 is a vulnerability affecting Zoom SDK versions prior to 5.14.10, which could allow an unauthenticated user to enable a denial of service through network access. The vulnerability falls under the category of "Improper Input Validation" (CWE-20) and has a CVSS base score of 7.5, indicating a high severity level. The affected products include various versions of Zoom SDK, with potential danger to organizations that use these products for video conferencing and collaboration. To remediate the vulnerability, it is recommended to update the Zoom SDK to version 5.14.10 or later. The exploitability score for this vulnerability is 3.9, and the attack vector is through the network, with low attack complexity and high availability impact. No privileges are required, and no user interaction is needed for the exploit to occur.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions