CVE-2022-27924
KEV · RansomwareSynacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
View CVE record →- Vendor / Project
- Synacor
- Product
- Zimbra Collaboration Suite (ZCS)
- Date added
- Aug 4, 2022
- Due date
- Aug 25, 2022
- Known ransomware use
- Known
- CWEs
- CWE-93
Description
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.
Required action
Apply updates per vendor instructions.