Pre-auth Null pointer crash in on-premise web console
Priority LOW 25CWE-476Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-476.
Summary
The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42.20200905, Zoom On-Premise Virtual Room Connector before version 4.4.6344.20200612, and Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5492.20200616 fails to validate that a NULL byte was sent while authenticating. This could lead to a crash of the login service.
Why it matters now
EPSS 0.00628 50th percentileScored 2026-11-07
Fix Fixed Zoom On-Premise Meeting Connector (Zoom Video Communications Inc): 4.6.239.20200613Zoom On-Premise Meeting Connector MMR (Zoom Video Communications Inc): 4.6.239.20200613+3 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Zoom Video Communications, Inc. | Zoom On-Premise Meeting Connector | before 4.6.239.20200613 | 4.6.239.20200613 | Patch available | CNA |
| Zoom Video Communications, Inc. | Zoom On-Premise Meeting Connector MMR | before 4.6.239.20200613 | 4.6.239.20200613 | Patch available | CNA |
| Zoom Video Communications, Inc. | Zoom On-Premise Recording Connector | before 3.8.42.20200905 | 3.8.42.20200905 | Patch available | CNA |
| Zoom Video Communications, Inc. | Zoom On-Premise Virtual Room Connector | before 4.4.6344.20200612 | 4.4.6344.20200612 | Patch available | CNA |
| Zoom Video Communications, Inc. | Zoom On-Premise Virtual Room Connector Load Balancer | before 2.5.5492.20200616 | 2.5.5492.20200616 | Patch available | CNA |
- Zoom On-Premise Meeting Connector VendorZoom Video Communications, Inc. Affected before 4.6.239.20200613 Fixed in 4.6.239.20200613 Patch available CNA
- Zoom On-Premise Meeting Connector MMR VendorZoom Video Communications, Inc. Affected before 4.6.239.20200613 Fixed in 4.6.239.20200613 Patch available CNA
- Zoom On-Premise Recording Connector VendorZoom Video Communications, Inc. Affected before 3.8.42.20200905 Fixed in 3.8.42.20200905 Patch available CNA
- Zoom On-Premise Virtual Room Connector VendorZoom Video Communications, Inc. Affected before 4.4.6344.20200612 Fixed in 4.4.6344.20200612 Patch available CNA
- Zoom On-Premise Virtual Room Connector Load Balancer VendorZoom Video Communications, Inc. Affected before 2.5.5492.20200616 Fixed in 2.5.5492.20200616 Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_controller:*:*:*:*:*:*:*:* | before 4.6.239.20200613 | Vulnerable | Zoom Video Communications, Inc. |
| cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_mmr:*:*:*:*:*:*:*:* | before 4.6.239.20200613 | Vulnerable | Zoom Video Communications, Inc. |
| cpe:2.3:a:zoom:zoom_on-premise_recording_connector:*:*:*:*:*:*:*:* | before 3.8.42.20200905 | Vulnerable | Zoom Video Communications, Inc. |
| cpe:2.3:a:zoom:zoom_on-premise_virtual_room_connector:*:*:*:*:*:*:*:* | before 4.4.6344.20200612 | Vulnerable | Zoom Video Communications, Inc. |
| cpe:2.3:a:zoom:zoom_on-premise_virtual_room_connector_load_balancer:*:*:*:*:*:*:*:* | before 2.5.5492.20200616 | Vulnerable | Zoom Video Communications, Inc. |
- cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_controller:*:*:*:*:*:*:*:* Versions before 4.6.239.20200613 Vulnerable ·Zoom Video Communications, Inc.
- cpe:2.3:a:zoom:zoom_on-premise_meeting_connector_mmr:*:*:*:*:*:*:*:* Versions before 4.6.239.20200613 Vulnerable ·Zoom Video Communications, Inc.
- cpe:2.3:a:zoom:zoom_on-premise_recording_connector:*:*:*:*:*:*:*:* Versions before 3.8.42.20200905 Vulnerable ·Zoom Video Communications, Inc.
- cpe:2.3:a:zoom:zoom_on-premise_virtual_room_connector:*:*:*:*:*:*:*:* Versions before 4.4.6344.20200612 Vulnerable ·Zoom Video Communications, Inc.
- cpe:2.3:a:zoom:zoom_on-premise_virtual_room_connector_load_balancer:*:*:*:*:*:*:*:* Versions before 2.5.5492.20200616 Vulnerable ·Zoom Video Communications, Inc.
Remediation
- Fix · CNA Zoom On-Premise Meeting Connector (Zoom Video Communications Inc) Fixed in 4.6.239.20200613
- Fix · CNA Zoom On-Premise Meeting Connector MMR (Zoom Video Communications Inc) Fixed in 4.6.239.20200613
- Fix · CNA Zoom On-Premise Recording Connector (Zoom Video Communications Inc) Fixed in 3.8.42.20200905
- Fix · CNA Zoom On-Premise Virtual Room Connector (Zoom Video Communications Inc) Fixed in 4.4.6344.20200612
- Fix · CNA Zoom On-Premise Virtual Room Connector Load Balancer (Zoom Video Communications Inc) Fixed in 2.5.5492.20200616
Timeline
- 2026-10-02 Threatist record created from CVE-2021-34418
- 2026-10-03 Alias added: GHSA-9m9w-fffc-45mm
- 2026-10-29 EPSS moved to the 50th–90th percentile
References
More Zoom Video Communications, Inc. Zoom On-premise Meeting Connector Controller vulnerabilities
- TI-2021-13457 Buffer overflow in Zoom client and other products CVSS 3.1CRITICAL 9.8
- TI-2021-13451 Authenticated remote command execution with root privileges via web console in MMR CVSS 3.1HIGH 7.9
- TI-2021-13458 Process memory exposure in Zoom Client and other products CVSS 3.1HIGH 7.5
- TI-2022-07032 Process memory exposure in Zoom on-premise Meeting services CVSS 3.1HIGH 7.5
Sources
- CVE-2021-34418 · CVE Program
- CVE-2021-34418 · NVD
- FIRST EPSS
- GHSA-9m9w-fffc-45mm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences