CVE-2022-27924

HIGHCVSS 7.5Known Exploited

CISA Known Exploited Vulnerability

https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24.1#Security_Fixes; https://nvd.nist.gov/vuln/detail/CVE-2022-27924

Remediation deadline: August 25, 2022

Ransomware use: Known

Description

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.

Timeline

Published:April 21st, 2022 12:15 AM

Last modified:August 4th, 2026 5:16 AM

Added to KEV:August 4th, 2022

CVSS Scoring

CVSS v3: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2: 5.0

Affected Software

From NVD CPE configuration data

Vendors

synacor

Products

zimbra_collaboration_suite

Weaknesses (CWE)

CWE-74

References & Reports

Advisories, patches, and third-party reports

https://wiki.zimbra.com/wiki/Security_CenterVendor Advisory
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24Release Notes
https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
https://wiki.zimbra.com/wiki/Security_CenterVendor Advisory
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24Release Notes
https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27924US Government Resource

Source: NIST NVD · Data may lag official sources by up to one minute