CERT-In alerts users about critical security gaps in Zoom

Zoom users in India have been warned of a new security issue which concerns the Zoom Rooms feature on Windows and macOS devices. The warning comes from the Indian Computer Emergency Response Team (CERT-In) with a high severity rating.

Zoom being widely popular among consumers and businesses for video meetings and other activities supported by the platform, any security risk will pose issues for people using it for their businesses and personal use. 

The CERT-In bulletin shares the Zoom products and versions that are affected by the latest risks –

·         Zoom Rooms for Windows before version 7.1.0

·         Zoom Workplace for Windows before version 7.0.5

·         Zoom Workplace VDI Client for Windows before versions 6.5.18, 6.6.15 and 7.0.10 in their respective branch

·         Zoom Workplace VDI plugin for Windows before versions 6.5.17 and 6.6.14 in their respective branch

·         Zoom Remote Control for Zoom Contact Center for Windows before version 7.0.0

The latest security risk alert regarding Zoom Rooms from CERT-In says, “Multiple vulnerabilities exist in Zoom products due to improper input validation, race conditions (time-of-check to time-of-use), and improper privilege management."

The threat alert comes with a critical rating and the risks are serious enough that can be targeted at any business or an individual using Zoom for their work or personal use. They can even use the vulnerabilities to bypass the security of the device and access sensitive information, the agency warns.