CVE-2023-4463

A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit...

CVE-2023-24282

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file...

CVE-2019-15742

A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application. A local attacker can exploit this issue to gain elevated privileges...

CVE-2019-11355

An issue was discovered in Poly formerly Polycom HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator's page. The value received from the user is the factor value of a shell script on the equipment. By...

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

CVE-2025-0858

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure...

CVE-2025-0858

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure...

CVE-2025-0858

The CVE-2025-0858 entry is about Poly Edge E firmware up to version 8.2.1.0820 where a path traversal flaw could disclose information. The root cause is the firmware not properly preventing path traversal. Affected products are Poly Edge E devices; impact is information disclosure. The exploited ...

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

HP Poly Edge E Series 安全漏洞

HP Poly Edge E Series is a series of IP desktop phones from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Poly Edge E Series 8.2.1.0820 and earlier versions, which stems from firmware that does not properly prevent path traversal and can lead to information...

PT-2025-5701 · Poly · Poly Edge E

Name of the Vulnerable Software and Affected Versions: Poly Edge E devices versions up to 8.2.1.0820 Description: A flaw in the firmware does not properly prevent path traversal, which could lead to information disclosure. Recommendations: For versions up to 8.2.1.0820, update the firmware to a...

Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected produc...

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579

CVE-2024-9579 concerns Poly video conferencing devices. The issue is a firmware input sanitation flaw that enables remote code execution only via a layered attack; it cannot be exploited in isolation. Affected are Poly video conferencing devices (firmwareSanitization issue). Exploitation requires...

PT-2024-9534 · Poly · Poly Video Conferencing Devices

Name of the Vulnerable Software and Affected Versions: Poly video conferencing devices affected versions not specified Description: A potential issue was discovered in certain Poly video conferencing devices, related to the firmware not properly sanitizing user input. This can be exploited by a...

Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself. The recommendation is to update an impacted devi...

The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audiovisual systems lies in its ability to download files of a malicious nature indefinitely, allowing a hacker to execute arbitrary code.

The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to the ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...