CVE-2025-34093

🗓️ 10 Jul 2025 19:13:44Reported by VulnCheckType

Authenticated command injection in Polycom HDX Series Telnet allows arbitrary command execution.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-34093	29 May 201815:50	–	circl
CNNVD	Polycom HDX Series 操作系统命令注入漏洞	10 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-34093 Polycom HDX Series Telnet Command Injection via lan traceroute	10 Jul 202519:13	–	cvelist
EUVD	EUVD-2025-21033	3 Oct 202520:07	–	euvd
NVD	CVE-2025-34093	10 Jul 202520:15	–	nvd
Positive Technologies	PT-2025-29136 · Polycom · Polycom Hdx Series	10 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-34093	12 Jul 202519:24	–	redhatcve
Vulnrichment	CVE-2025-34093 Polycom HDX Series Telnet Command Injection via lan traceroute	10 Jul 202519:13	–	vulnrichment

Vulners

CNA

Node

polycom hdx_seriesRange0–3.1.11 hotfix 2

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "lan traceroute command",
      "Polycom HDX Series command shell (devcmds console)"
    ],
    "product": "HDX Series",
    "vendor": "Polycom",
    "versions": [
      {
        "lessThan": "3.1.11 hotfix 2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/24494
vulncheck	www.vulncheck.com/advisories/polycom-hdx-series-telnet-rce
web	www.web.archive.org/web/20200312205144/http://support.polycom.com/content/dam/polycom-support/global/documentation/securityadvisory-remotecodeexecutionon-hdx-v0.3-hotfix-release.pdf
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/misc/polycom_hdx_traceroute_exec.rb
staaldraad	www.staaldraad.github.io/2017/11/12/polycom-hdx-rce/

15 Apr 2026 00:35Current

8.3High risk

Vulners AI Score8.3

CVSS 47.5

EPSS0.72105

SSVC

CWE-78