CVE-2023-36539
Estado: ModificadaAlta (7.5)—
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.53%
- Percentil entre todas las CVEs puntuadas: 43
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (9)
CWE
- CWE-200, CWE-325
- CWE-326
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-36539",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-36539",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-10-28T13:04:31.982326Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "security@zoom.us",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 1.6
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security@zoom.us",
"affectedData": [
{
"vendor": "Zoom Video Communications, Inc.",
"product": "Zoom clients",
"versions": [
{
"status": "affected",
"version": "See references link for ZSB-23025"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-06-30T03:15:09.747",
"references": [
{
"url": "https://explore.zoom.us/en/trust/security/security-bulletin/",
"tags": [
"Vendor Advisory"
],
"source": "security@zoom.us"
},
{
"url": "https://explore.zoom.us/en/trust/security/security-bulletin/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "security@zoom.us",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-325"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-326"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information."
},
{
"lang": "es",
"value": "La exposición de información destinada a ser cifrada por algunos clientes Zoom puede dar lugar a la divulgación de información sensible."
}
],
"lastModified": "2026-06-17T06:06:29.730",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:android:*:*",
"vulnerable": true,
"matchCriteriaId": "B19B33AC-0C62-48B8-974F-EBB94700432E"
},
{
"criteria": "cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:iphone_os:*:*",
"vulnerable": true,
"matchCriteriaId": "64EC33E5-F6E4-4845-B181-52DEC0E707BD"
},
{
"criteria": "cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "F566F4A2-7A6F-4ECC-BD73-1F63AE4030B1"
},
{
"criteria": "cpe:2.3:a:zoom:meetings:5.15.1:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "E3E84645-EF69-4A61-B946-5DEEDD27A85E"
},
{
"criteria": "cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:ipad_os:*:*",
"vulnerable": true,
"matchCriteriaId": "1735FAF3-E7B4-4615-92AD-5BA3399F6D55"
},
{
"criteria": "cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "2FFA4C37-4EFB-42F5-98BE-811F413113F9"
},
{
"criteria": "cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "ABB880FF-8853-45AE-818A-23CECB48E030"
},
{
"criteria": "cpe:2.3:a:zoom:video_software_development_kit:1.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84A39B46-A23B-4194-BDBF-16C337ADD1D1"
},
{
"criteria": "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:android:*:*",
"vulnerable": true,
"matchCriteriaId": "A47C1AC4-3092-41BE-8BB3-BABCD2ADC350"
},
{
"criteria": "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:iphone_os:*:*",
"vulnerable": true,
"matchCriteriaId": "F6FC3EA3-DAD3-4D9E-8EF3-5CAC1A54EE45"
},
{
"criteria": "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "502FC5A5-08CE-464F-A39E-FB16476F7B02"
},
{
"criteria": "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "8AB43228-B469-46D9-BE1E-F7BCCC777F34"
},
{
"criteria": "cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "36AA507D-1B5D-42A3-A0BD-0D5FAA6AE3AA"
},
{
"criteria": "cpe:2.3:a:zoom:zoom:5.15.1:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "E7777FBA-8B77-430F-8B64-AFB14E517179"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zoom:poly_ccx_700_firmware:5.15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEC1BF64-379E-4623-9F5F-EC37D9AE8928"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zoom:poly_ccx_700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "27D5E538-97CB-4F05-B8FC-AC6497425E78"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zoom:poly_ccx_600_firmware:5.15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E12A046-159E-4E45-954F-57A0C43938F4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zoom:poly_ccx_600:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A85D6BC1-E736-487F-8C02-C54B49F7C8B2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zoom:yealink_vp59_firmware:5.15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE053959-5DE3-4954-8FD5-7D15FA77BC77"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zoom:yealink_vp59:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C661E9DF-1D17-408A-95D9-DE5D941EC93B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zoom:yealink_mp54_firmware:5.15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A33909C-EB63-4234-A2B5-6F6D39EB8ACB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zoom:yealink_mp54:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1F942425-D356-47BA-95A6-61E1FD5029F4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:zoom:yealink_mp56_firmware:5.15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31C96F0F-E282-427B-92C7-225252952F3E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:zoom:yealink_mp56:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B5097727-AE57-436F-B7EF-E93BD96B2E23"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security@zoom.us"
}