India’s Computer Emergency Response Team (CERT-In) has identified several vulnerabilities in the Zoom video conferencing platform. In issuing an advisory, the agency said Zoom vulnerabilities may allow an unauthenticated remote user to join a Zoom video meeting without appearing to other participants in the attendee list.
Classified under the “Medium” threat level, the vulnerabilities, according to CERT-In, can allow an attacker to bypass security restrictions implemented on targeted systems. They can secretly join a Zoom meeting and get the meeting audio and video streams.
CERT-IN is a nodal agency under the Ministry of Electronics and Information Technology. This government agency is responsible for reporting bugs and cybersecurity threats like hacking and phishing attacks.
The vulnerabilities were also reported by Zoom. These are called CVE-2022-28758, CVE-2022-28759, and CVE-2022-28760, and they affect Zoom’s on-premises meeting connector MMR prior to version 4.8.20220815.130. According to Zoom, this inappropriate access control vulnerability can allow a malicious actor to join a meeting they are not authorized to join without appearing to other participants.
Zoom raised the vulnerability on September 13, while the cyber agency released the advisory on September 19. In its advisory, CERT-In advised users to update to the latest version of Zoom on their devices. To update Zoom on your laptop, log into the Zoom desktop client. Here, click on your profile picture and check for updates. If a new version is available, download and install it. Smartphone users can go to Google Play or Apple App Store and check the latest versions of the Zoom app.
Recently, CERT-In issued a high-risk warning for some Microsoft users. This included Microsoft Windows, Microsoft Office, Microsoft SharePoint, Microsoft Dynamics CRM, Visual Studio, and .NET Framework. The agency advised users of these Microsoft products to apply the latest security patch based on Microsoft’s September 2022 security update.
Catch all the tech news and updates on Live Mint. Download the Mint News app to get daily market updates and live trade news.
More less
Post your comment