PT-2023-2061 · Zoom · Zoom

Published 2023-03-14 · Updated 2025-02-19 · CVE-2023-28597

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 5.13.5

Description The issue is related to an improper trust boundary implementation when connecting to an SMB server. This could allow a remote attacker to gain unauthorized access to protected information or execute arbitrary code. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom's web portal, an attacker on an adjacent network could set up a malicious SMB server, causing the client to execute attacker-controlled executables. This may result in an attacker gaining access to a user's device and data, and remote code execution.

Recommendations For versions prior to 5.13.5, update to version 5.13.5 or later to resolve the issue. As a temporary workaround, consider restricting access to SMB servers or avoiding the use of links from Zoom's web portal to open local recordings until the update is applied.

Fix

RCE

Weakness Enumeration

CWE-501

Related Identifiers

BDU:2023-01785

CVE-2023-28597

Affected Products

Zoom

References · 8

• https://osv.dev/vulnerability/CVE-2023-28597 · Vendor Advisory
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28597 · Security Note
• https://bdu.fstec.ru/vul/2023-01785 · Security Note
• https://t.me/cibsecurity/60830 · Telegram Post
• https://vuldb.com/?id.224160 · Note
• https://t.me/cvenotify/111759 · Telegram Post
• https://t.me/cvenotify/47415 · Telegram Post