1. Home
  2. CVE Database
  3. CVE-2021-34415
HIGH · 7.5

CVE-2021-34415

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustio...

Vulnerability Description

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
ZoomMeeting Connector< 4.6.358.20210205

Related Weaknesses (CWE)

CWE-770

References

FAQ

What is CVE-2021-34415?

CVE-2021-34415 is a vulnerability with a CVSS score of 7.5 (HIGH). The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustio...

How severe is CVE-2021-34415?

CVE-2021-34415 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-34415?

Check the references section above for vendor advisories and patch information. Affected products include: Zoom Meeting Connector.