Zoom Node Multimedia Routers Command Injection Vulnerability Allowing Remote Code Execution

A command injection vulnerability has been identified in Zoom Node Multimedia Routers (MMRs) used in Meetings Hybrid or Meeting Connector deployments, prior to version 5.2.1716.0. This vulnerability may allow a meeting participant to execute remote code on the MMR via network access.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected MMR.

Remediation

Users are advised to update to the latest available MMR version. Instructions for updating Zoom Node deployments can be found in the Zoom support article 'Managing updates for Zoom Node'.