Poly VVX 601 Diagnostic Telnet Mode os command injection
Priority LOW 38CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600 and VVX 601. This issue affects some unknown processing of the component Diagnostic Telnet Mode. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The identifier VDB-249257 was assigned to this vulnerability.
Why it matters now
EPSS 0.03315 88th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Poly | Trio 8300 | all versions | — | No fix listed | CNA |
| Poly | Trio 8500 | all versions | — | No fix listed | CNA |
| Poly | Trio 8800 | all versions | — | No fix listed | CNA |
| Poly | Trio C60 | all versions | — | No fix listed | CNA |
| Poly | CCX 350 | all versions | — | No fix listed | CNA |
| Poly | CCX 400 | all versions | — | No fix listed | CNA |
| Poly | CCX 500 | all versions | — | No fix listed | CNA |
| Poly | CCX 505 | all versions | — | No fix listed | CNA |
| Poly | CCX 600 | all versions | — | No fix listed | CNA |
| Poly | CCX 700 | all versions | — | No fix listed | CNA |
| Poly | EDGE E100 | all versions | — | No fix listed | CNA |
| Poly | EDGE E220 | all versions | — | No fix listed | CNA |
| Poly | EDGE E300 | all versions | — | No fix listed | CNA |
| Poly | EDGE E320 | all versions | — | No fix listed | CNA |
| Poly | EDGE E350 | all versions | — | No fix listed | CNA |
| Poly | EDGE E400 | all versions | — | No fix listed | CNA |
| Poly | EDGE E450 | all versions | — | No fix listed | CNA |
| Poly | EDGE E500 | all versions | — | No fix listed | CNA |
| Poly | EDGE E550 | all versions | — | No fix listed | CNA |
| Poly | VVX 101 | all versions | — | No fix listed | CNA |
| Poly | VVX 150 | all versions | — | No fix listed | CNA |
| Poly | VVX 201 | all versions | — | No fix listed | CNA |
| Poly | VVX 250 | all versions | — | No fix listed | CNA |
| Poly | VVX 300 | all versions | — | No fix listed | CNA |
| Poly | VVX 301 | all versions | — | No fix listed | CNA |
| Poly | VVX 310 | all versions | — | No fix listed | CNA |
| Poly | VVX 311 | all versions | — | No fix listed | CNA |
| Poly | VVX 350 | all versions | — | No fix listed | CNA |
| Poly | VVX 400 | all versions | — | No fix listed | CNA |
| Poly | VVX 401 | all versions | — | No fix listed | CNA |
| Poly | VVX 410 | all versions | — | No fix listed | CNA |
| Poly | VVX 411 | all versions | — | No fix listed | CNA |
| Poly | VVX 450 | all versions | — | No fix listed | CNA |
| Poly | VVX 500 | all versions | — | No fix listed | CNA |
| Poly | VVX 501 | all versions | — | No fix listed | CNA |
| Poly | VVX 600 | all versions | — | No fix listed | CNA |
| Poly | VVX 601 | all versions | — | No fix listed | CNA |
- Trio 8300 VendorPoly Affected all versions Fixed in — No fix listed CNA
- Trio 8500 VendorPoly Affected all versions Fixed in — No fix listed CNA
- Trio 8800 VendorPoly Affected all versions Fixed in — No fix listed CNA
- Trio C60 VendorPoly Affected all versions Fixed in — No fix listed CNA
- CCX 350 VendorPoly Affected all versions Fixed in — No fix listed CNA
- CCX 400 VendorPoly Affected all versions Fixed in — No fix listed CNA
- CCX 500 VendorPoly Affected all versions Fixed in — No fix listed CNA
- CCX 505 VendorPoly Affected all versions Fixed in — No fix listed CNA
- CCX 600 VendorPoly Affected all versions Fixed in — No fix listed CNA
- CCX 700 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E100 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E220 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E300 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E320 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E350 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E400 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E450 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E500 VendorPoly Affected all versions Fixed in — No fix listed CNA
- EDGE E550 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 101 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 150 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 201 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 250 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 300 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 301 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 310 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 311 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 350 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 400 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 401 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 410 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 411 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 450 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 500 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 501 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 600 VendorPoly Affected all versions Fixed in — No fix listed CNA
- VVX 601 VendorPoly Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:poly:ccx_400_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Poly |
| cpe:2.3:h:poly:ccx_400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Poly |
| cpe:2.3:o:poly:ccx_600_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Poly |
| cpe:2.3:h:poly:ccx_600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Poly |
| cpe:2.3:o:poly:trio_8800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Poly |
| cpe:2.3:h:poly:trio_8800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Poly |
| cpe:2.3:o:poly:trio_c60_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Poly |
| cpe:2.3:h:poly:trio_c60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Poly |
- cpe:2.3:o:poly:ccx_400_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Poly
- cpe:2.3:h:poly:ccx_400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Poly
- cpe:2.3:o:poly:ccx_600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Poly
- cpe:2.3:h:poly:ccx_600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Poly
- cpe:2.3:o:poly:trio_8800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Poly
- cpe:2.3:h:poly:trio_8800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Poly
- cpe:2.3:o:poly:trio_c60_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Poly
- cpe:2.3:h:poly:trio_c60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Poly
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-4464
- 2026-10-03 Alias added: GHSA-rfg4-wjmf-xghf
References
More Poly Ccx 400 Firmware vulnerabilities
- TI-2023-04120 Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP Header denial of service CVSS 3.1HIGH 7.5
- TI-2023-04122 Poly VVX 601 Configuration File Import unverified password change CVSS 3.1MEDIUM 6.5
- TI-2023-04119 Poly VVX 601 Web Configuration Application random values CVSS 3.1MEDIUM 5.9
- TI-2023-04123 Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanism CVSS 3.1MEDIUM 4.9
Sources
- CVE-2023-4464 · CVE Program
- CVE-2023-4464 · NVD
- FIRST EPSS
- GHSA-rfg4-wjmf-xghf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences