← Back

CVE-2021-34418

nvd nist
Published: Nov 11, 2021Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before version 4.4.6344.20200612, and Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5492.20200616 fails to validate that a NULL byte was sent while authenticating. This could lead to a crash of the login service.

Affected (5)

Zoom
5 products
Zoom On Premise Meeting Connector Controller
Zoom On Premise Meeting Connector Mmr
Zoom On Premise Recording Connector
Zoom On Premise Virtual Room Connector
Zoom On Premise Virtual Room Connector Load Balancer
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Zoom On Premise Meeting Connector Controller
Before 4.6.239.20200613
Zoom On Premise Meeting Connector Mmr
Before 4.6.239.20200613
Zoom On Premise Recording Connector
Before 3.8.42.20200905
Zoom On Premise Virtual Room Connector
Before 4.4.6344.20200612
Zoom On Premise Virtual Room Connector Load Balancer
Before 2.5.5492.20200616

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

Source: security@zoom.us
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.