LifeSize

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

LifeSize records in CISA KEV

No LifeSize vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lifesize Room Appliance Software 2 records MEDIUM Express 220 Firmware 1 record LOW Icon 300 Firmware 1 record MEDIUM Icon 500 Firmware 1 record MEDIUM Icon 700 Firmware 1 record MEDIUM Networker 220 Firmware 1 record MEDIUM Passport 220 Firmware 1 record MEDIUM Room 220 Firmware 1 record MEDIUM

Records

6 records

TI-2018-15537 CVE-2018-25312 · GHSA-xg4x-2cmm-rgc9

LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution

MEDIUM 64

LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path parameters in the smartgui interface.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00933 Published 2026-04-29 No fix listed CWE-22

TI-2011-02422 CVE-2011-2763 · GHSA-w5h8-693r-qmf6

The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows…

MEDIUM 59

The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.36139 Published 2011-09-02 No fix listed CWE-20

TI-2019-05379 CVE-2019-7632 · GHSA-m2jh-6vx8-f48m

LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS…

MEDIUM 47

LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtu_size parameter.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.06494 Published 2019-02-08 No fix listed CWE-78

TI-2019-02724 CVE-2019-3702 · GHSA-6p57-3rq7-cw9q

A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0…

MEDIUM 46

A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05205 Published 2019-05-13 No fix listed CWE-78

TI-2018-12801 CVE-2018-17981 · GHSA-384c-r8hx-r986

Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.

LOW 29

Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00776 Published 2020-01-22 No fix listed CWE-79

TI-2011-02421 CVE-2011-2762 · GHSA-6hqj-hpcq-8jfc

The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) allows remote…

LOW 27

The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) allows remote attackers to bypass authentication via unspecified data associated with a "true" authentication status, related to AMF data and the LSRoom_…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02268 Published 2011-09-02 No fix listed CWE-287

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0