Description
Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client was generated using parameters that could be obtained by a local low-privileged application. That key can then be used to interact with the daemon service to execute privileged functions and cause a local denial of service.
Published: 2023-01-09
Score: 4.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-39583 Zoom Rooms for macOS clients before version 5.11.4 contain an insecure key generation mechanism. The encryption key used for IPC between the Zoom Rooms daemon service and the Zoom Rooms client was generated using parameters that could be obtained by a local low-privileged application. That key can then be used to interact with the daemon service to execute privileged functions and cause a local denial of service.
History

Wed, 09 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Zoom Rooms
cve-icon MITRE

Status: PUBLISHED

Assigner: Zoom

Published:

Updated: 2025-04-09T14:33:28.921Z

Reserved: 2022-07-27T00:00:00.000Z

Link: CVE-2022-36925

cve-icon Vulnrichment

Updated: 2024-08-03T10:14:29.461Z

cve-icon NVD

Status : Modified

Published: 2023-01-09T19:15:10.987

Modified: 2024-11-21T07:14:05.920

Link: CVE-2022-36925

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses