News

NCC urges Zoom users to update software over vulnerability

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised the users of videotelephony platform, Zoom, to install the latest update of the software from its publisher’s official website following the discovery of vulnerabilities that allows a remote attacker to exploit the app.

In an advisory issued on Wednesday by the NCC Director, Public Affairs, Reuben Muoka, the commission noted that the Indian Computer Emergency Response Team (CERT-In) found several flaws in Zoom product.

The videotelephony platform became popular for virtual meetings in the wake of the COVID-19 Pandemic with more than 300 million daily users.

The NCC-CSIRT advisory read: “A remote attacker could exploit the vulnerabilities to circumvent implemented security measures and cause a denial of service on the targeted machine.

READ ALSO: NCC targets N500bn from 5G spectrums auctioning

“These vulnerabilities exist owing to incorrect access control implementation in Zoom On-Premises Meeting Connector MMR prior to version 4.8.20220815.130. A remote attacker could exploit these flaws to join a meeting they were not permitted to attend without being seen by the other attendees. They can also access audio and video feeds from meetings they were not permitted to attend, as well as interrupt other sessions.

“Successful exploit of these vulnerabilities could allow an unauthorised remote authenticated user to bypass implemented security limitations on the targeted system.”

The Computer Security Incident Response Team (CSIRT) is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also work collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risks incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems, or related events.

The Star

Segun Ojo

Recent Posts

FG to shut Lagos-Calabar Coastal Highway over safety breaches

The Federal Government has given motorists and other road users on the Lagos section of…

44 minutes ago

Dangote sets 2028 target for fertiliser business IPO

Africa’s richest man and President of Dangote Group, Aliko Dangote, has disclosed that the group…

1 hour ago

Dutch firm begins project to convert Nigeria’s flared gas to LPG, electricity

Netherlands-based Energy Ventures BV has commenced preparations for a project to convert flared gas into…

2 hours ago

Witness to Court: Bauchi accountant-general diverted state funds to private firm

A compliance officer with United Bank for Africa, UBA, has told the Federal High Court…

3 hours ago

Tinubu extends vacation, returns to Nigeria this weekend

President Bola Tinubu has extended his working vacation by a few days and is expected…

3 hours ago

2027: Obi, Atiku only won in their imagination — Wike

Minister of the Federal Capital Territory, Nyesom Wike, has dismissed claims that Peter Obi and…

3 hours ago

This website uses cookies.