Cross site scripting

The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS...

CVE-2018-14934

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone...

CVE-2018-14935

The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS...

CVE-2018-14934

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone...

CVE-2018-14934

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone...

CVE-2018-14935

The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS...

CVE-2018-14934

The CVE-2018-14934 entry concerns Polycom Trio devices with software versions prior to 5.5.4. The Bluetooth subsystem has Incorrect Access Control, allowing an attacker to connect without authentication and subsequently record audio from the device microphone. Impact is documented as partial conf...

CVE-2018-14935

The CVE-2018-14935 entry maps to a web-based XSS in the Web administration console of Polycom Trio devices running software before 5.5.4. Affected component: the web admin UI. Root cause: reflected/scripted input in the console without proper encoding. Impact: user-facing XSS could affect confide...

CVE-2018-14935: Improper Neutralization of Input During Web Page Generation

The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS...

CVE-2018-14934: Incorrect Permission Assignment for Critical Resource

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone...

PT-2018-12810

Name of the Vulnerable Software and Affected Versions Polycom Trio devices versions prior to 5.5.4 Description The issue affects the Web administration console, where a cross-site scripting XSS problem exists. This could potentially allow attackers to execute malicious scripts. Recommendations Fo...

PT-2018-12809

Name of the Vulnerable Software and Affected Versions Polycom Trio devices versions prior to 5.5.4 Description The issue concerns the Bluetooth subsystem, which has incorrect access control. This allows an attacker to connect to the device without authentication and record audio from the device...

Polycom SoundStation IP, VVX and RealPresence Trio UCS Information Disclosure Vulnerability

Polycom SoundStation IP, VVX, and RealPresence Trio are all products of Polycom, Inc.Polycom SoundStation IP is an IP phone; VVX is a visual conference phone; and RealPresence Trio is a smart Multimedia devices. An information disclosure vulnerability exists in the UCS in Polycom SoundStation IP,...

Information disclosure

Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote attacker to read a segment of the phone's...

CVE-2017-12857

Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote attacker to read a segment of the phone's...

CVE-2017-12857

Polycom devices (SoundStation IP, VVX, RealPresence Trio) running UCS versions older than 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by an information-disclosure vulnerability in the UCS web application. An authenticated remote attacker could read memory segments containing adminis...

CVE-2017-12857: Exposure of Sensitive Information to an Unauthorized Actor

Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote attacker to read a segment of the phone's...

PT-2017-12731

Name of the Vulnerable Software and Affected Versions Polycom SoundStation IP, VVX, and RealPresence Trio versions prior to UCS 4.0.12 Polycom SoundStation IP, VVX, and RealPresence Trio versions prior to 5.4.5 rev AG Polycom SoundStation IP, VVX, and RealPresence Trio versions prior to 5.4.7...

Schneider Electric Trio TView Software suffers from dll hijacking vulnerability

Schneider Electric Trio TView Software is a virtual diagnostic software. Schneider Electric Trio TView Software suffers from a dll hijacking vulnerability. The vulnerability is caused due to the Trio TView Software application containing a DLL that fails to specify an absolute path, which could b...

Schneider Electric Trio TView

CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Schneider Electric Equipment: Trio TView Vulnerabilities: Multiple Vulnerabilities for Java Runtime Environment AFFECTED PRODUCTS The following versions of Schneider Electric Trio TView...