Lucene search

HP Product Security Response TeamHPSBPY03957

HistoryAug 05, 2024 - 12:00 a.m.

Clariti Manager - Arbitrary File Upload

2024-08-0500:00:00

HP Product Security Response Team

support.hp.com

arbitrary file upload

firmware vulnerability

poly clariti manager

user input sanitization

firmware update

poly lens management

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

JSON

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize user input.

The recommendation is to update an impacted device to firmware build 10.12.0.2_100 or later. Customers can receive the latest builds through Poly Lens Management Console.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

JSON

Related for HPSBPY03957