Man-in-the-Middle (MitM) attack in Zoom Video Communications, Inc. products - CVE-2023-22885

Vulnerability identifier: #VU73695

CSH Severity: Medium

CVSS v4: 7.3 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-22885

CWE-ID: CWE-300

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to the way the Zoom client handles SMB shares. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables.

Zoom Rooms Client for Windows
Zoom Rooms Client for macOS
Zoom Workplace Desktop App for Windows
Zoom Workplace Desktop App for macOS
Zoom Workplace Desktop App for Linux
Zoom Workplace App for iOS
Zoom Workplace App for Android
Virtual Desktop Infrastructure (VDI)

Install updates from vendor's website.

Zoom Rooms Client for Windows - update to 5.13.5 2391
Zoom Rooms Client for macOS - update to 5.13.5 2258
Zoom Workplace App for iOS - update to 5.13.5 6434
Zoom Workplace Desktop App for Windows - update to 5.13.5 12053
Zoom Workplace Desktop App for macOS - update to 5.13.5 14826
Virtual Desktop Infrastructure (VDI) - update to 5.13.10
Zoom Workplace App for Android - update to 5.13.5 11533
Zoom Workplace Desktop App for Linux - update to 5.13.5 431

• https://explore.zoom.us/en/trust/security/security-bulletin/#ZSB-23005

• Multiple vulnerabilities in Zoom clients