Vulnerabilites related to zoom - yealink_vp59
cve-2023-36539
Vulnerability from cvelistv5
Published
2023-06-30 02:01
Modified
2024-10-28 13:04
Severity ?
EPSS score ?
Summary
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zoom Video Communications, Inc. | Zoom clients |
Version: See references link for ZSB-23025 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T16:52:52.360Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://explore.zoom.us/en/trust/security/security-bulletin/", }, ], title: "CVE Program Container", }, { metrics: [ { other: { content: { id: "CVE-2023-36539", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-28T13:04:31.982326Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-28T13:04:46.477Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", product: "Zoom clients", vendor: "Zoom Video Communications, Inc.", versions: [ { status: "affected", version: "See references link for ZSB-23025", }, ], }, ], datePublic: "2023-06-30T02:00:00.000Z", descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<span style=\"background-color: rgb(247, 247, 250);\">Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.</span>", }, ], value: "Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-200", description: "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", lang: "en", type: "CWE", }, ], }, { descriptions: [ { cweId: "CWE-325", description: "CWE-325 Missing Cryptographic Step", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-09-18T18:25:53.635Z", orgId: "99b9af0d-a833-4a5d-9e2f-8b1324f35351", shortName: "Zoom", }, references: [ { url: "https://explore.zoom.us/en/trust/security/security-bulletin/", }, ], source: { discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.1.0-dev", }, }, }, cveMetadata: { assignerOrgId: "99b9af0d-a833-4a5d-9e2f-8b1324f35351", assignerShortName: "Zoom", cveId: "CVE-2023-36539", datePublished: "2023-06-30T02:01:21.401Z", dateReserved: "2023-06-22T18:04:31.169Z", dateUpdated: "2024-10-28T13:04:46.477Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2023-06-30 03:15
Modified
2024-11-21 08:09
Severity ?
5.3 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| zoom | meetings | 5.15.0 | |
| zoom | meetings | 5.15.0 | |
| zoom | meetings | 5.15.0 | |
| zoom | meetings | 5.15.1 | |
| zoom | rooms | 5.15.0 | |
| zoom | rooms | 5.15.0 | |
| zoom | rooms | 5.15.0 | |
| zoom | video_software_development_kit | 1.8.0 | |
| zoom | zoom | 5.15.0 | |
| zoom | zoom | 5.15.0 | |
| zoom | zoom | 5.15.0 | |
| zoom | zoom | 5.15.0 | |
| zoom | zoom | 5.15.0 | |
| zoom | zoom | 5.15.1 | |
| zoom | poly_ccx_700_firmware | 5.15.0 | |
| zoom | poly_ccx_700 | - | |
| zoom | poly_ccx_600_firmware | 5.15.0 | |
| zoom | poly_ccx_600 | - | |
| zoom | yealink_vp59_firmware | 5.15.0 | |
| zoom | yealink_vp59 | - | |
| zoom | yealink_mp54_firmware | 5.15.0 | |
| zoom | yealink_mp54 | - | |
| zoom | yealink_mp56_firmware | 5.15.0 | |
| zoom | yealink_mp56 | - |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:android:*:*", matchCriteriaId: "B19B33AC-0C62-48B8-974F-EBB94700432E", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:iphone_os:*:*", matchCriteriaId: "64EC33E5-F6E4-4845-B181-52DEC0E707BD", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:macos:*:*", matchCriteriaId: "F566F4A2-7A6F-4ECC-BD73-1F63AE4030B1", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:meetings:5.15.1:*:*:*:*:windows:*:*", matchCriteriaId: "E3E84645-EF69-4A61-B946-5DEEDD27A85E", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:ipad_os:*:*", matchCriteriaId: "1735FAF3-E7B4-4615-92AD-5BA3399F6D55", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:macos:*:*", matchCriteriaId: "2FFA4C37-4EFB-42F5-98BE-811F413113F9", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:windows:*:*", matchCriteriaId: "ABB880FF-8853-45AE-818A-23CECB48E030", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:video_software_development_kit:1.8.0:*:*:*:*:*:*:*", matchCriteriaId: "84A39B46-A23B-4194-BDBF-16C337ADD1D1", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:android:*:*", matchCriteriaId: "A47C1AC4-3092-41BE-8BB3-BABCD2ADC350", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:iphone_os:*:*", matchCriteriaId: "F6FC3EA3-DAD3-4D9E-8EF3-5CAC1A54EE45", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:linux:*:*", matchCriteriaId: "502FC5A5-08CE-464F-A39E-FB16476F7B02", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:macos:*:*", matchCriteriaId: "8AB43228-B469-46D9-BE1E-F7BCCC777F34", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:windows:*:*", matchCriteriaId: "36AA507D-1B5D-42A3-A0BD-0D5FAA6AE3AA", vulnerable: true, }, { criteria: "cpe:2.3:a:zoom:zoom:5.15.1:*:*:*:*:windows:*:*", matchCriteriaId: "E7777FBA-8B77-430F-8B64-AFB14E517179", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zoom:poly_ccx_700_firmware:5.15.0:*:*:*:*:*:*:*", matchCriteriaId: "EEC1BF64-379E-4623-9F5F-EC37D9AE8928", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zoom:poly_ccx_700:-:*:*:*:*:*:*:*", matchCriteriaId: "27D5E538-97CB-4F05-B8FC-AC6497425E78", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zoom:poly_ccx_600_firmware:5.15.0:*:*:*:*:*:*:*", matchCriteriaId: "9E12A046-159E-4E45-954F-57A0C43938F4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zoom:poly_ccx_600:-:*:*:*:*:*:*:*", matchCriteriaId: "A85D6BC1-E736-487F-8C02-C54B49F7C8B2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zoom:yealink_vp59_firmware:5.15.0:*:*:*:*:*:*:*", matchCriteriaId: "CE053959-5DE3-4954-8FD5-7D15FA77BC77", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zoom:yealink_vp59:-:*:*:*:*:*:*:*", matchCriteriaId: "C661E9DF-1D17-408A-95D9-DE5D941EC93B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zoom:yealink_mp54_firmware:5.15.0:*:*:*:*:*:*:*", matchCriteriaId: "1A33909C-EB63-4234-A2B5-6F6D39EB8ACB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zoom:yealink_mp54:-:*:*:*:*:*:*:*", matchCriteriaId: "1F942425-D356-47BA-95A6-61E1FD5029F4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:zoom:yealink_mp56_firmware:5.15.0:*:*:*:*:*:*:*", matchCriteriaId: "31C96F0F-E282-427B-92C7-225252952F3E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:zoom:yealink_mp56:-:*:*:*:*:*:*:*", matchCriteriaId: "B5097727-AE57-436F-B7EF-E93BD96B2E23", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.", }, { lang: "es", value: "La exposición de información destinada a ser cifrada por algunos clientes Zoom puede dar lugar a la divulgación de información sensible.", }, ], id: "CVE-2023-36539", lastModified: "2024-11-21T08:09:53.833", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, exploitabilityScore: 1.6, impactScore: 3.6, source: "security@zoom.us", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2023-06-30T03:15:09.747", references: [ { source: "security@zoom.us", tags: [ "Vendor Advisory", ], url: "https://explore.zoom.us/en/trust/security/security-bulletin/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://explore.zoom.us/en/trust/security/security-bulletin/", }, ], sourceIdentifier: "security@zoom.us", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-200", }, { lang: "en", value: "CWE-325", }, ], source: "security@zoom.us", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-326", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }