CVE-2022-28752— Zoom Rooms 安全漏洞

Local Privilege Escalation in the Zoom Rooms for Windows Client

Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulnerability. A local low-privileged malicious user could exploit this vulnerability to escalate their privileges to the SYSTEM user.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

密码学签名的验证不恰当

Zoom Rooms 安全漏洞

Zoom Rooms是美国Zoom公司的一个基于软件的会议系统。允许在固定终端上进行网络会议的系统，类似于传统的视频会议系统。 Zoom Rooms for Conference Rooms for Windows 5.11.0之前版本存在安全漏洞，该漏洞源于容易受到本地权限提升漏洞的影响，本地低权限的恶意用户可以利用此漏洞将其权限提升到SYSTEM用户。

N/A

N/A