CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2025-0858: Path Traversal: '.../...//'

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure...

HP Poly Edge E Series 安全漏洞

HP Poly Edge E Series is a series of IP desktop phones from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Poly Edge E Series 8.2.1.0820 and earlier versions, which stems from firmware that does not properly prevent path traversal and can lead to information...

PT-2025-5701 · Poly · Poly Edge E

Name of the Vulnerable Software and Affected Versions: Poly Edge E devices versions up to 8.2.1.0820 Description: A flaw in the firmware does not properly prevent path traversal, which could lead to information disclosure. Recommendations: For versions up to 8.2.1.0820, update the firmware to a...

Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected produc...

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

CVE-2024-9579

CVE-2024-9579 concerns Poly video conferencing devices. The issue is a firmware input sanitation flaw that enables remote code execution only via a layered attack; it cannot be exploited in isolation. Affected are Poly video conferencing devices (firmwareSanitization issue). Exploitation requires...

CVE-2024-9579: Improper Neutralization of Special Elements used in a Command

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself...

PT-2024-9534 · Poly · Poly Video Conferencing Devices

Name of the Vulnerable Software and Affected Versions: Poly video conferencing devices affected versions not specified Description: A potential issue was discovered in certain Poly video conferencing devices, related to the firmware not properly sanitizing user input. This can be exploited by a...

Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself. The recommendation is to update an impacted devi...

The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audiovisual systems lies in its ability to download files of a malicious nature indefinitely, allowing a hacker to execute arbitrary code.

The vulnerability of the Poly Clariti Manager platform for managing, planning, and maintaining audio-visual systems is related to the ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2024-41912

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls...

CVE-2024-41912

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls...

CVE-2024-41912

Poly Clariti Manager firmware builds up to 10.10.2.2 are affected by a flaw that fails to properly enforce access controls, potentially enabling unauthorized access. Affected product/versions: Poly Clariti Manager devices up to 10.10.2.2. Root cause: firmware-level access-control flaw (per multip...

CVE-2024-41912

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls...

CVE-2024-41912

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls...

PT-2024-29630

Name of the Vulnerable Software and Affected Versions Poly Clariti Manager versions up to 10.10.2.2 Description A flaw in the firmware of Poly Clariti Manager devices was discovered, where access controls are not properly implemented. Recommendations For versions up to 10.10.2.2, update to a...