Skip to main content

Poly

12 CVEs vendor

Monthly

CVE-2023-4468 Dec 29, 10:15 HIGH This Week

A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. Rated high severity (CVSS 7.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Trio C60 Trio 8800 Firmware Lens Poly
NVD GitHub VulDB
CVSS 3.1
7.6
EPSS
0.3%
CVE-2023-4467 Dec 29, 10:15 MEDIUM This Month

A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Trio 8800 Firmware Poly
NVD GitHub VulDB
CVSS 3.1
6.6
EPSS
0.3%
CVE-2023-4466 Dec 29, 10:15 MEDIUM This Month

A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Trio 8800 Firmware Ccx 400 Firmware Ccx 600 Firmware Trio C60 Firmware +1
NVD GitHub VulDB
CVSS 3.1
4.9
EPSS
0.5%
CVE-2023-4465 Dec 29, 10:15 MEDIUM This Month

A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Trio 8800 Firmware Ccx 400 Firmware Ccx 600 Firmware Trio C60 Firmware +1
NVD GitHub VulDB
CVSS 3.1
6.5
EPSS
0.5%
CVE-2023-4464 Dec 29, 10:15 HIGH This Week

A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Trio 8800 Firmware Ccx 400 Firmware Ccx 600 Firmware Trio C60 Firmware +1
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
3.3%
CVE-2023-4463 Dec 29, 10:15 HIGH POC This Week

A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Trio 8800 Firmware Ccx 400 Firmware Ccx 600 Firmware Trio C60 Firmware +1
NVD GitHub VulDB
CVSS 3.1
7.5
EPSS
1.0%
CVE-2023-4462 Dec 29, 10:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Trio 8800 Firmware Ccx 400 Firmware Ccx 600 Firmware Trio C60 Firmware +1
NVD GitHub VulDB
CVSS 3.1
5.9
EPSS
0.9%
CVE-2023-24282 Mar 08, 21:15 MEDIUM POC This Month

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE File Upload Trio 8800 Firmware Poly
NVD VulDB
CVSS 3.1
5.4
EPSS
0.5%
CVE-2022-26482 Jul 17, 23:15 HIGH POC THREAT This Week

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Eagleeye Director Ii Firmware Poly
NVD
CVSS 3.1
7.2
EPSS
22.3%
CVE-2022-26481 Jul 17, 23:15 HIGH POC This Week

An issue was discovered in Poly Studio before 3.7.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Studio X30 Firmware Studio X70 Firmware G7500 Firmware Studio X50 Firmware +1
NVD
CVSS 3.1
8.8
EPSS
1.6%
CVE-2022-26479 Jul 17, 23:15 CRITICAL POC Act Now

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Eagleeye Director Ii Firmware Poly
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-37145 Sep 07, 23:15 HIGH This Week

A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attacker to Privilege Escalation and Remote Code Execution. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation RCE Command Injection Cx5500 Firmware Cx5100 Firmware +1
NVD
CVSS 3.1
7.2
EPSS
2.0%
EPSS 0% CVSS 7.6
HIGH This Week

A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. Rated high severity (CVSS 7.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Trio C60 Trio 8800 Firmware +2
NVD GitHub VulDB
EPSS 0% CVSS 6.6
MEDIUM This Month

A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Trio 8800 Firmware Poly
NVD GitHub VulDB
EPSS 1% CVSS 4.9
MEDIUM This Month

A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Trio 8800 Firmware Ccx 400 Firmware +3
NVD GitHub VulDB
EPSS 0% CVSS 6.5
MEDIUM This Month

A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Trio 8800 Firmware Ccx 400 Firmware +3
NVD GitHub VulDB
EPSS 3% CVSS 7.2
HIGH This Week

A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Trio 8800 Firmware Ccx 400 Firmware +3
NVD GitHub VulDB
EPSS 1% CVSS 7.5
HIGH POC This Week

A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Trio 8800 Firmware Ccx 400 Firmware +3
NVD GitHub VulDB
EPSS 1% CVSS 5.9
MEDIUM POC This Month

A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Trio 8800 Firmware Ccx 400 Firmware +3
NVD GitHub VulDB
EPSS 0% CVSS 5.4
MEDIUM POC This Month

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE File Upload +2
NVD VulDB
EPSS 22% CVSS 7.2
HIGH POC THREAT This Week

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Eagleeye Director Ii Firmware Poly
NVD
EPSS 2% CVSS 8.8
HIGH POC This Week

An issue was discovered in Poly Studio before 3.7.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Studio X30 Firmware Studio X70 Firmware +3
NVD
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Eagleeye Director Ii Firmware Poly
NVD
EPSS 2% CVSS 7.2
HIGH This Week

A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attacker to Privilege Escalation and Remote Code Execution. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation RCE Command Injection +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy