{"affected":[{"defaultStatus":"unaffected","platforms":["Windows","MacOS","Linux","iOS","Android"],"product":"Zoom Clients","source":"CNA: Zoom","vendor":"Zoom Video Communications, Inc.","versions":[{"status":"affected","version":"See references"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:*:*:*","versionEndExcluding":"5.16.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:*:*:*","versionEndExcluding":"5.16.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*","versionEndExcluding":"5.14.14","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.12","versionStartIncluding":"5.15.0","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*","versionEndExcluding":"5.16.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*","versionEndExcluding":"5.16.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*","versionEndExcluding":"5.16.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*","versionEndExcluding":"5.16.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*","versionEndExcluding":"5.16.5","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2023-49646","cwes":["CWE-347","CWE-287"],"description":"Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.","epss":{"date":"2026-11-02","percentile":0.34548,"score":0.00403},"exploits":[],"kev":null,"metrics":[{"score":6.4,"severity":"medium","source":"CNA: Zoom","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":6.4,"severity":"medium","source":"NVD: security@zoom.us","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","version":"3.1"}],"modifiedAt":1793661438093,"publishedAt":1702505966963,"references":[{"source":"CNA: Zoom","tags":[],"url":"https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/"},{"source":"security@zoom.us","tags":["Vendor Advisory"],"url":"https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/"}],"remediation":[],"revision":"5991aa8f3169173b5b5b8bd28920818953add1debe6564dace7f9ca8a6b4429e","sources":[{"modifiedAt":1793659279198,"name":"CNA: Zoom","retrievedAt":1793660924048,"url":"https://www.cve.org/CVERecord?id=CVE-2023-49646"},{"modifiedAt":1793661438093,"name":"NVD","retrievedAt":1793665116283,"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49646"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793660931106,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-49646"}],"ssvc":{"assessedAt":1793659274131,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2023-49646","updatedAt":1793665116283}