Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Priority MEDIUM 40

A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote attacker with admin…

CVSS 3.0HIGH 8.3 Network Low privileges No interaction EPSS 0.01726 Published 2019-07-29 No fix listed CWE-749
Priority LOW 30

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the BToE application and th…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00718 Published 2019-06-24 No fix listed CWE-287
Priority LOW 30

VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded credentials to establish connections between the host applicatio…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00318 Published 2019-04-23 No fix listed CWE-798
Priority LOW 28

Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise inst…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00734 Published 2018-10-24 No fix listed CWE-295