Medium severity6.5NVD Advisory· Published Jun 15, 2022· Updated Jun 17, 2026

CVE-2022-28749

Description

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./On Premise Meeting Connector Multimedia Router
cpe:2.3:a:zoom:on-premise_meeting_connector_multimedia_router:4.8.113.20220526:*:*:*:*:*:*:*
Zoom Video Communications, Inc./On-Premise Meeting Connectorllm-create
Range: <4.8.113.20220526
Zoom Video Communications, Inc./Zoom On Premise Meeting Connector Zone Controller (zc)cpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

explore.zoom.us/en/trust/security/security-bulletin/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000