CVE-2022-27924
Published 2022-04-21 · Updated 2026-10-02 · Source cve@mitre.org
Summary
CVE-2022-27924 is a high-severity (CVSS 7.5) vulnerability in Synacor Zimbra Collaboration Suite (ZCS). CISA added it to the Known Exploited Vulnerabilities catalog on August 4, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by August 25, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Synacor has 19 vulnerabilities in the KEV catalog, 6 of them linked to ransomware.
All 19 known-exploited Synacor vulnerabilities →Description
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA Known-Exploited Vulnerability
Product: Synacor — Zimbra Collaboration Suite (ZCS)
Name: Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Date added: 2022-08-04 · Due: 2022-08-25
Required action: Apply updates per vendor instructions.
References
- https://wiki.zimbra.com/wiki/Security_Center
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- https://wiki.zimbra.com/wiki/Security_Center
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27924