CVE-2023-4462

🗓️ 29 Dec 2023 09:31:03Reported by VulDBType

Vulnerability in Poly CCX 400, CCX 600, Trio 8800, Trio C60 web config app

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for Use of Insufficiently Random Values in Poly Ccx_400_Firmware	30 Jan 202407:34	–	githubexploit
Circl	CVE-2023-4462	29 Dec 202310:46	–	circl
CNNVD	Poly Trio Security Feature Issue Vulnerability	29 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-4462 Poly VVX 601 Web Configuration Application random values	29 Dec 202309:31	–	cvelist
EUVD	EUVD-2023-54317	3 Oct 202520:07	–	euvd
Hewlett-Packard	UC Software - Use of Insufficiently Random Values	8 Jan 202400:00	–	hp
NVD	CVE-2023-4462	29 Dec 202310:15	–	nvd
Prion	Design/Logic Flaw	29 Dec 202310:15	–	prion
Positive Technologies	PT-2023-29274 · Poly · Edge E220 +36	29 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-4462	23 May 202504:47	–	redhatcve

NVD

Node

poly ccx_400_firmwareMatch-

AND

poly ccx_400Match-

Node

poly ccx_600_firmwareMatch-

AND

poly ccx_600Match-

Node

poly trio_8800_firmwareMatch-

AND

poly trio_8800Match-

Node

poly trio_c60_firmwareMatch-

AND

poly trio_c60Match-

[
  {
    "vendor": "Poly",
    "product": "Trio 8300",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "Trio 8500",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "Trio 8800",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "Trio C60",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "CCX 350",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "CCX 400",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "CCX 500",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "CCX 505",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "CCX 600",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "CCX 700",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E100",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E220",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E300",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E320",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E350",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E400",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E450",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E500",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "EDGE E550",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 101",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 150",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 201",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 250",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 300",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 301",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 310",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 311",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 350",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 400",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 401",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 410",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 411",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 450",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 500",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 501",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 600",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  },
  {
    "vendor": "Poly",
    "product": "VVX 601",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ],
    "modules": [
      "Web Configuration Application"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
support	www.support.hp.com/us-en/document/ish_9929296-9929329-16/hpsbpy03896
fahrplan	www.fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html
modzero	www.modzero.com/en/advisories/mz-23-01-poly-voip/
github	www.github.com/modzero/MZ-23-01-Poly-VoIP-Devices
modzero	www.modzero.com/en/blog/multiple-vulnerabilities-in-poly-products/

21 Nov 2024 08:35Current

5Medium risk

Vulners AI Score5

CVSS 3.13.7 - 5.9

CVSS 22.6

CVSS 33.7

EPSS0.00446

CWE-330