CVE-2021-34420

Zoom Windows installation executable signature bypass

Medium · published November 11, 2021

CVSS v3.1
4.7
EPSS
0%
Percentile
33.9
In the wild
Unconfirmed
What it is

The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00407 · 33.9th percentile
Published
2021-11-11T22:59Z
EPSS history
Timeline
  • 11 NOV 22:59Z
    Zoom Windows installation executable signature bypass
    cvelistv5