High severity7.5NVD Advisory· Published Aug 11, 2022· Updated Jun 17, 2026

CVE-2022-28750

Description

Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be leveraged to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Meeting Connector
cpe:2.3:a:zoom:meeting_connector:*:*:*:*:*:*:*:*
Range: <4.8.20220419.112
Zoom Video Communications, Inc./On-Premise Meeting Connector Zone Controllerllm-create
Range: <4.8.20220419.112
Zoom Video Communications, Inc./Zoom On Premise Meeting Connector Zone Controller (zc)v5
Range: unspecified

Patches

Vulnerability mechanics

References

explore.zoom.us/en/trust/security/security-bulletin/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000