Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorization
Priority LOW 33CWE-862Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-862.
Summary
A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly Lens Management Cloud Registration. The manipulation leads to missing authorization. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier VDB-249261 was assigned to this vulnerability.
Why it matters now
EPSS 0.00253 16th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Poly | Trio 8500 | all versions | — | No fix listed | CNA |
| Poly | Trio 8800 | all versions | — | No fix listed | CNA |
| Poly | Trio C60 | all versions | — | No fix listed | CNA |
- Trio 8500 VendorPoly Affected all versions Fixed in — No fix listed CNA
- Trio 8800 VendorPoly Affected all versions Fixed in — No fix listed CNA
- Trio C60 VendorPoly Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:poly:trio_8800_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Poly |
| cpe:2.3:h:poly:trio_8800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Poly |
| cpe:2.3:h:poly:trio_c60:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Poly |
| cpe:2.3:h:poly:trio_c60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Poly |
| cpe:2.3:a:poly:lens:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Poly |
- cpe:2.3:o:poly:trio_8800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Poly
- cpe:2.3:h:poly:trio_8800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Poly
- cpe:2.3:h:poly:trio_c60:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Poly
- cpe:2.3:h:poly:trio_c60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Poly
- cpe:2.3:a:poly:lens:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Poly
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-4468
- 2026-10-03 Alias added: GHSA-rv87-xrcf-5c22
References
Sources
- CVE-2023-4468 · CVE Program
- CVE-2023-4468 · NVD
- FIRST EPSS
- GHSA-rv87-xrcf-5c22 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences