PT-2021-4712 · Zoom+1 · Zoom Client For Meetings+2

Published 2021-09-27 · Updated 2021-10-06 · CVE-2021-34412

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings for Windows versions prior to 5.4.0

Description The issue is related to insufficient access control in the Zoom Client for Meetings for Windows, which can be exploited to gain elevated privileges. During the installation process, it is possible to launch Internet Explorer, and if the installer is launched with elevated privileges, such as by SCCM, this can result in a local privilege escalation.

Recommendations For versions prior to 5.4.0, update to version 5.4.0 or later to resolve the issue. As a temporary workaround, consider avoiding the installation of the Zoom Client for Meetings for Windows with elevated privileges until a patch is applied. Restrict access to the installation process to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2021-05416

CVE-2021-34412

Affected Products

Internet Explorer

Sccm

Zoom Client For Meetings

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-34412 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34412 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05416 · Security Note
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://t.me/cvenotify/21800 · Telegram Post
• https://t.me/cvenotify/21511 · Telegram Post
• https://t.me/cibsecurity/29485 · Telegram Post