Read the docs

LifeSize

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

LifeSize records in CISA KEV

No LifeSize vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lifesize Room Appliance Software 2 records MEDIUM Express 220 Firmware 1 record LOW Icon 300 Firmware 1 record MEDIUM Icon 500 Firmware 1 record MEDIUM Icon 700 Firmware 1 record MEDIUM Networker 220 Firmware 1 record MEDIUM Passport 220 Firmware 1 record MEDIUM Room 220 Firmware 1 record MEDIUM

Records

1 record in Icon 700 Firmware · all components

TI-2019-02724 CVE-2019-3702 · GHSA-6p57-3rq7-cw9q

A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0…

Priority MEDIUM 46

A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05205 Published 2019-05-13 No fix listed CWE-78
Open these records in search →