Zoom.Meeting.Connector.Authenticated.Remote.Command.Injection

Description

This indicates an attack attempt to exploit a Remote Command Injection Vulnerability in Zoom Meeting Connector.
The vulnerability is due to an improper input validation error when handling an crafted HTTP request. A remote, authenticated attacker can exploit the vulnerability by sending crafted requests to a vulnerable application. Successful exploitation can result in remote code execution in the context of the service.

Affected Products

Zoom Meeting Connector 4.6.239.20200613

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://support.zoom.us/hc/en-us/articles/201363093-Deploying-the-Meeting-Connector

References