Polycom

Unified Communications Software

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.3

CVE-2019-12948

  • EPSS 1.19%
  • Veröffentlicht 29.07.2019 16:15:12
  • Zuletzt bearbeitet 21.11.2024 04:23:52

A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote attacker with admin privileges to cause a denial o...

5.3

CVE-2018-18566

Exploit
  • EPSS 0.38%
  • Veröffentlicht 24.10.2018 22:29:01
  • Zuletzt bearbeitet 21.11.2024 03:56:10

The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.

5.9

CVE-2018-18568

Exploit
  • EPSS 0.13%
  • Veröffentlicht 24.10.2018 22:29:01
  • Zuletzt bearbeitet 21.11.2024 03:56:10

Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Busine...

8.8

CVE-2017-12857

  • EPSS 0.4%
  • Veröffentlicht 25.08.2017 19:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated re...