PT-2025-42385 · Zoom · Zoom Rooms

Published 2025-10-15 · Updated 2025-10-21 · CVE-2025-58133

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoom Rooms Clients versions prior to 6.5.1

Description An authentication bypass exists in certain Zoom Rooms Clients before version 6.5.1. This allows an unauthenticated user to potentially disclose information through network access.

Recommendations Update Zoom Rooms Clients to version 6.5.1 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-58133

Affected Products

Zoom Rooms

References · 7

• https://osv.dev/vulnerability/CVE-2025-58133 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58133 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-25039 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1978658186606293045 · Twitter Post
• https://t.me/CVEtracker/35029 · Telegram Post
• https://twitter.com/CVEnew/status/1978545040046862367 · Twitter Post
• https://t.me/cveNotify/139741 · Telegram Post