CVE-2023-36539: Weak Encryption
Published Jun 30, 2023
·Updated
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
Affected Software
34 affected components
Zoom Meetings Android=5.15.0
Zoom Meetings Iphone Os=5.15.0
Zoom Meetings Macos=5.15.0
Zoom Meetings Windows=5.15.1
Zoom Rooms Ipad Os=5.15.0
Zoom Rooms Macos=5.15.0
Zoom Rooms Windows=5.15.0
Zoom Video Software Development Kit=1.8.0
Zoom Zoom Android=5.15.0
Zoom Zoom Iphone Os=5.15.0
Zoom Zoom Linux=5.15.0
Zoom Zoom Macos=5.15.0
Zoom Zoom Windows=5.15.0
Zoom Zoom Windows=5.15.1
Zoom Poly Ccx 700 Firmware=5.15.0
Zoom Poly Ccx 700
Zoom Poly Ccx 600 Firmware=5.15.0
Zoom Poly Ccx 600
Zoom Yealink Vp59 Firmware=5.15.0
Zoom Yealink Vp59
Zoom Yealink Mp54 Firmware=5.15.0
Zoom Yealink Mp54
Zoom Yealink Mp56 Firmware=5.15.0
Zoom Yealink Mp56
All of the following
Zoom Poly Ccx 700 Firmware=5.15.0
Zoom Poly Ccx 700
All of the following
Zoom Poly Ccx 600 Firmware=5.15.0
Zoom Poly Ccx 600
All of the following
Zoom Yealink Vp59 Firmware=5.15.0
Zoom Yealink Vp59
All of the following
Zoom Yealink Mp54
Zoom Yealink Mp54 Firmware=5.15.0
All of the following
Zoom Yealink Mp56
Zoom Yealink Mp56 Firmware=5.15.0
Event History
Jun 30, 2023
CVE Published
via MITRE·02:01 AM
Data Sourced
via MITRE·02:01 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this Zoom vulnerability?
The vulnerability ID of this Zoom vulnerability is CVE-2023-36539.
2
What is the severity of CVE-2023-36539?
The severity of CVE-2023-36539 is high with a CVSS score of 7.5.
3
Which software versions are affected by CVE-2023-36539?
Zoom Meetings version 5.15.0, Zoom Meetings version 5.15.1, Zoom Rooms version 5.15.0, Zoom Video Software Development Kit version 1.8.0, and Zoom Zoom versions 5.15.0 and 5.15.1 are affected by CVE-2023-36539.
4
What is the impact of CVE-2023-36539?
CVE-2023-36539 may lead to the disclosure of sensitive information that was intended to be encrypted.
5
Is there a fix available for CVE-2023-36539?
Yes, a fix is available for CVE-2023-36539. It is recommended to update Zoom Meetings and Zoom Zoom to the latest version.