EUVD-2019-2482

Malware in sbrugna...

Authentication flaw

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector BToE application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information...

CVE-2019-10689

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector BToE application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information...

PT-2019-11995

Name of the Vulnerable Software and Affected Versions Polycom VVX products using UCS software version 5.9.2 and earlier Polycom VVX products using Better Together over Ethernet Connector BToE application version 3.9.1 and earlier Description The issue results in insufficient authentication betwee...

CVE-2019-10688

VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector BToE application 3.9.1, use hard-coded credentials to establish connections between the host application and the device...

Hardcoded credentials

VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector BToE application 3.9.1, use hard-coded credentials to establish connections between the host application and the device...

PT-2019-11994

Name of the Vulnerable Software and Affected Versions Polycom VVX products versions prior to UCS 5.9.2 Description The issue concerns the use of hard-coded credentials to establish connections between the host application and the device in VVX products. This specifically affects versions includin...