CVE-2021-34415

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector Controller versions prior to 4.6.358.20210205

Description: The Zone Controller service does not verify the cnt field sent in incoming network packets, leading to exhaustion of resources and system crash.

Recommendations: For versions prior to 4.6.358.20210205, update to version 4.6.358.20210205 or later to resolve the issue. As a temporary workaround, consider restricting incoming network packets to minimize the risk of exploitation.