CVE-2021-37145

A command-injection vulnerability in an authenticated Telnet connection in Poly formerly Polycom CX5500 and CX5100 1.3.5 leads an attacker to Privilege Escalation and Remote Code Execution capability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-37145

Poly CX5500 and CX5100 (version 1.3.5) expose a command-injection vulnerability over an authenticated Telnet session, enabling Privilege Escalation and Remote Code Execution. Root cause: unauthenticated? no, authenticated Telnet path; exploitation details not fully specified in the provided docum...