CVE-2021-37145

A command-injection vulnerability in an authenticated Telnet connection in Poly formerly Polycom CX5500 and CX5100 1.3.5 leads an attacker to Privilege Escalation and Remote Code Execution capability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

The vulnerability of the microprogramming software used in Polycom CX5100 and CX5500 teleconferencing stations stems from the lack of measures taken to neutralize special elements used in the operating system. This allows attackers to exploit their privileges.

The vulnerability of the microprogramming software used in Polycom CX5100 and CX5500 conference call stations exists due to the lack of measures taken to neutralize the special elements used in the operating system. Exploiting this vulnerability can allow attackers to enhance their privileges...