CVE-2021-34420
Last modified
CVE-2021-34420 is a high-severity vulnerability rated 7.4/10 on the CVSS scale. The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zoom | Zoom Client For Meetings | < 5.4.4 |
References
- https://explore.zoom.us/en/trust/security/security-bulletinVendor Advisory
- https://explore.zoom.us/en/trust/security/security-bulletinVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-34420?
How severe is CVE-2021-34420?
How do I fix CVE-2021-34420?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-34415The Zone Controller service in the Zoom On-Premise Meeting C…7.5
- CVE-2021-34416The network address administrative settings web portal for t…9.8
- CVE-2021-34417The network proxy page on the web portal for the Zoom On-Pre…7.2
- CVE-2021-34418The login routine of the web console in the Zoom On-Premise …5.3
- CVE-2021-34419In the Zoom Client for Meetings for Ubuntu Linux before vers…5.3
- CVE-2021-3442A flaw was found in the Red Hat OpenShift API Management pro…5.4
- CVE-2021-34421The Keybase Client for Android before version 5.8.0 and the …4.3
- CVE-2021-34422The Keybase Client for Windows before version 5.7.0 contains…9
- CVE-2021-34423A buffer overflow vulnerability was discovered in Zoom Clien…9.8
- CVE-2021-34424A vulnerability was discovered in the Zoom Client for Meetin…7.5
- CVE-2021-34425The Zoom Client for Meetings before version 5.7.3 (for Andro…6.1
- CVE-2021-34426A vulnerability was discovered in the Keybase Client for Win…7.8
Are you affected by CVE-2021-34420?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST