CVE-2022-27924—Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

PUBLISHEDvulnerability record
2022-08-04 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-27924
Project:
Synacor
Product:
Zimbra Collaboration Suite (ZCS)
Date Added:
2022-08-04
Due Date:
2022-08-25
Last Updated:
June 21, 2025

Vulnerability Name

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Description

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24.1#Security_Fixes
  • https://nvd.nist.gov/vuln/detail/CVE-2022-27924

Related News Articles

Related Weaknesses

browse all CVEs