Lucene search
HistoryJul 17, 2022 - 11:15 p.m.
CVE-2022-26481
cve-2022-26481
poly studio
command injection
create csr
security vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.6%
An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.
Affected configurations
Node
polystudio_x30Match-
polystudio_x30_firmwareRange<3.7.0
Node
polystudio_x70_firmwareRange<3.7.0
polystudio_x70Match-
Node
polyg7500_firmwareRange<3.7.0
polyg7500Match-
Node
polystudio_x50_firmwareRange<3.7.0
polystudio_x50Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| poly:studio_x30_firmware | poly studio x30 firmware | lt | 3.7.0 |
References
Social References
More
Related
prion
prion
Command injection
2022-07-17 23:15:00
cvelist
cvelist
CVE-2022-26481
2022-07-17 22:11:00
zdt
zdt
packetstorm
packetstorm
Poly Studio X30 / Studio X50 / Studio X70 / G7500 Command Injection
2022-06-06 00:00:00
nvd
nvd
CVE-2022-26481
2022-07-17 23:15:08
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.6%
Related for CVE-2022-26481