A vulnerability in the web-based management interface of VVX, Trio, SoundStructure…
Priority MEDIUM 40CWE-749Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote attacker with admin privileges to cause a denial of service (DoS) condition or execute arbitrary code.
Why it matters now
EPSS 0.01726 77th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 55
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:* | before 5.8.5.1256; 5.9.3 to before 5.9.3.2857; 6.0.0 to before 6.0.0.4839 | Vulnerable | Polycom |
| cpe:2.3:h:polycom:c12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:c16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:c8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx201:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx301:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx311:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
- cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:* Versions before 5.8.5.1256; 5.9.3 to before 5.9.3.2857; 6.0.0 to before 6.0.0.4839 Vulnerable ·Polycom
- cpe:2.3:h:polycom:c12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:c16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:c8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx201:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx301:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx311:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
Show 45 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:polycom:vvx401:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx411:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx501:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx601:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:o:polycom:united_communications_software:*:*:*:*:*:*:*:* | before 5.9.0 | Vulnerable | Polycom |
| cpe:2.3:h:polycom:trio_8500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:trio_8800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:o:polycom:united_communications_software:*:*:*:*:*:*:*:* | before 4.0.14.1580 | Vulnerable | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_301:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_321:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_331:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_335:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_501:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_601:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_ip_670:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_pro_se-220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundpoint_pro_se-225:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation_duo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation_ip_4000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation_ip_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation_ip_6000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation_ip_7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation_ip_7000_video_integration:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation_vtx_1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation2_avaya_2490:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation2_direct_connect_for_nortel:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:soundstation2w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
| cpe:2.3:h:polycom:vvx600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Polycom |
- cpe:2.3:h:polycom:vvx401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx601:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:o:polycom:united_communications_software:*:*:*:*:*:*:*:* Versions before 5.9.0 Vulnerable ·Polycom
- cpe:2.3:h:polycom:trio_8500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:trio_8800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:o:polycom:united_communications_software:*:*:*:*:*:*:*:* Versions before 4.0.14.1580 Vulnerable ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_301:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_335:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_601:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_ip_670:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_pro_se-220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundpoint_pro_se-225:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation_duo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation_ip_4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation_ip_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation_ip_6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation_ip_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation_ip_7000_video_integration:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation_vtx_1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation2_avaya_2490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation2_direct_connect_for_nortel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:soundstation2w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
- cpe:2.3:h:polycom:vvx600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Polycom
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-12948
- 2026-10-03 Alias added: GHSA-5wpv-2g59-v5gg
References
More Polycom Unified Communications Software vulnerabilities
- TI-2017-09520 Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than… CVSS 3.0HIGH 8.8
- TI-2019-07979 VVX products using UCS software version 5.9.2 and earlier with Better Together over… CVSS 3.0MEDIUM 6.5
- TI-2019-07978 VVX products with software versions including and prior to, UCS 5.9.2 with Better… CVSS 3.0MEDIUM 6.8
- TI-2018-13130 The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote… CVSS 3.1MEDIUM 5.3
- TI-2018-13132 Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle… CVSS 3.1MEDIUM 5.9
Sources
- CVE-2019-12948 · CVE Program
- CVE-2019-12948 · NVD
- FIRST EPSS
- GHSA-5wpv-2g59-v5gg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences