Lucene search

[email protected]CVE-2019-10689

HistoryJun 24, 2019 - 10:15 p.m.

CVE-2019-10689

2019-06-2422:15:08

CWE-287

[email protected]

web.nvd.nist.gov

cve-2019-10689

vvx

ucs software

btoe

authentication

information leakage

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information.

Affected configurations

NVD

Node

polycombetter_together_over_ethernet_connectorRange≤3.9.1

polycomunified_communications_softwareRange≤5.9.2

CPENameOperatorVersion
polycom:better_together_over_ethernet_connectorpolycom better together over ethernet connectorle3.9.1
polycom:unified_communications_softwarepolycom unified communications softwarele5.9.2

CPE	Name	Operator	Version
polycom:better_together_over_ethernet_connector	polycom better together over ethernet connector	le	3.9.1
polycom:unified_communications_software	polycom unified communications software	le	5.9.2

References

www.securityfocus.com/bid/108799

support.polycom.com/content/dam/polycom-support/global/documentation/insufficient-authentication-leakage-vvx-products.pdf

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for CVE-2019-10689

nvd1 prion1 cvelist1