Two Zoom flaws allow unauthorized access to video and audio of conferences and meetings

Two users have a video call by Zoom.Unsplash

The Internet Security Office (OSI) of the National Cybersecurity Institute (INCIBE) issued a notice this Wednesday after two vulnerabilities were detected in the Zoom application that allow unauthorized access to conferences and meetings held through this program.

The issue affects the Zoom On-Premise Meeting Connector MMR resource from versions prior to 4.8.20220815.130.

This problem can be solved by updating immediately, available in the Zoom download center, to install the latest version, in which the bugs have not been detected.

The vulnerabilities, according to the Internet Security Office, allow access without permission and obtain the audio and video of any meeting without invitation or authorization to participate.

The bug would allow them to cause interruptions or simply attend without being visible to authorized participants.

INCIBE reminds you of the importance of keeping applications and programs correctly up to date, for which it is appropriate to activate the automatic update option.

In this way, the incorporation of the newest and most protected versions of the programs is carried out every time the news is released.

The alert follows the warning issued by Zoom's own Security Bulletin.

This application belongs to the company Zoom Video Communications, founded in 2011 by Eric Yuan, based in San Jose, California.

It is mainly known for its video call system and virtual meetings.

It is not the first time that the security of the program has been questioned and it has come to be prohibited by some companies and official institutions.

You can follow EL PAÍS TECNOLOGÍA on