CVE-2022-27924KEV Β· OVERDUECWE-74

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

High Β· published April 21, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1521
days past CISA
deadline
CVSS v3.1
7.5
EPSS
94%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 An unauthenticated attacker can inject memcache commands into Zimbra Collaboration, which opens the door to complete chaos! πŸ”₯ Think of it like a restaurant where anyone can walk into the kitchen and alter the recipes without anyone noticing. Just imagine the disastrous dishes that could come out if someone decided to change the ingredients of your favorite meal! This vulnerability allows attackers to overwrite cached entries, potentially altering user data or disrupting servicesβ€”like ruining your dinner party with a surprise mystery meal! If exploited, the consequences could be severely damaging to both integrity and availability, making it a high-priority issue to address.

Put simply

Think of it like a restaurant where anyone can walk into the kitchen and alter the recipes without anyone noticing. Just imagine the disastrous dishes that could come out if someone decided to change the ingredients of your favorite meal! CVE-2022-27924 allows unauthenticated attackers to inject arbitrary commands into memcache, bypassing input validation and causing data overwrites within Zimbra instances (specifically versions 8.8.15 and 9.0).

What to do

This vulnerability allows attackers to overwrite cached entries, potentially altering user data or disrupting servicesβ€”like ruining your dinner party with a surprise mystery meal! If exploited, the consequences could be severely damaging to both integrity and availability, making it a high-priority issue to address. To safeguard your systems, immediately patch Zimbra Collaboration to the latest version and ensure strict access controls are in place for memcache. Additionally, review input validation processes to prevent such command injections in the future. You've got this! With timely action, you can shield your systems and restore your security hero status! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.5 Β· HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.93908 Β· 99.8th percentile
Weakness
CWE-74 Β· Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2022-04-21T04:15Z
KEV added
2022-08-04 Β· due 2022-08-25
Affected products (56)
ProductVersionsFixed in
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
synacor/zimbra_collaboration_suiteall versionsβ€”
References (7)
EPSS history
Timeline
  • 04 AUG 00:00Z
    Added to CISA KEV β€” remediate by Aug 25
    kev
  • 20 APR 23:23Z
    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance
    cvelistv5