CVE-2022-26481

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request CSR action...

CVE-2022-26481

Poly Studio X30, X50, X70, and G7500 are affected by an authenticated command-injection vulnerability (CVE-2022-26481) in the CSR action CN field. Vulnerable versions include 3.4.0-292042, 3.5.0-344025, and 3.6.0; remediation is to upgrade to 3.7.0 or higher. The issue, described consistently acr...

CVE-2022-26482

Poly EagleEye Director II (pre-2.2.2.1) exposes an OS command injection via os.system that can be performed by an admin. Affected product/version: Poly EagleEye Director II prior to 2.2.2.1. Impact (per NVD): high severity (CVSSv3.1 base score 7.2) with high confidentiality, integrity, and availa...

CVE-2022-26482

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

CVE-2022-26479

Poly EagleEye Director II (pre-2.2.2.1) contains an authentication bypass vulnerability where the existence of a certain file (creatable via an rsync backdoor) causes all API calls to run with admin privileges. Affected component/file path is unspecified in the initial documents; root cause is an...

CVE-2022-26479

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...

CVE-2022-26479: Incorrect Authorization

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...

CVE-2022-26481: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request CSR action...

PT-2022-17893

Name of the Vulnerable Software and Affected Versions Poly Studio versions prior to 3.7.0 Description An issue was discovered that allows Command Injection to occur via the CN field of a Create Certificate Signing Request CSR action. Recommendations For versions prior to 3.7.0, update to version...

PT-2022-17894

Name of the Vulnerable Software and Affected Versions Poly EagleEye Director II versions prior to 2.2.2.1 Description An issue was discovered that allows os.system command injection to be achieved by an admin. Recommendations For versions prior to 2.2.2.1, update to version 2.2.2.1 or later to...

CVE-2022-26482: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

Malicious code in glip-chatbot-poly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab956936c2411a96c286ba8864378373c742a10ce48f62643ee9be7d5a227002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3385 Malicious code in glip-chatbot-poly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab956936c2411a96c286ba8864378373c742a10ce48f62643ee9be7d5a227002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Poly EagleEye Director II 2.2.1.1 Command Injection / Authentication Bypass Vulnerability

======================================================================= title: Multiple Critical Vulnerabilities product: Poly EagleEye Director II vulnerable version: 2.2.1.1 Jul 1, 2021 fixed version: 2.2.2.1 or higher CVE number: CVE-2022-26479, CVE-2022-26482 impact: critical homepage:...

Poly Studio X30 / Studio X50 / Studio X70 / G7500 Command Injection Vulnerability

======================================================================= title: Authenticated Command Injection product: Poly Studio X30, Studio X50, Studio X70, G7500 vulnerable version: 3.4.0-292042, 3.5.0-344025, 3.6.0 fixed version: 3.7.0 or higher CVE number: CVE-2022-26481 impact: critical...

Poly Studio X30 / Studio X50 / Studio X70 / G7500 Command Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authenticated Command Injection product: Poly Studio X30, Studio X50, Studio X70, G7500 vulnerable version: 3.4.0-292042, 3.5.0-344025, 3.6.0 fixed version: 3.7.0 or high...

Poly Studio X Series 操作系统命令注入漏洞

The Poly Studio X Series is a series of all-in-one video strips from Poly, Inc. It is used for video conferencing. An operating system command injection vulnerability exists in Poly Studio X30, Studio X50, Studio X70, G7500 version 3.4.0-292042, version 3.5.0-344025, and version 3.6.0, which stem...

Poly EagleEye Director 操作系统命令注入漏洞

Poly EagleEye Director is a conference camera system with automated people tracking from Poly USA. An operating system command injection vulnerability exists in Poly EagleEye Director II version 2.2.1.1, which stems from...

Poly EagleEye Director 操作系统命令注入漏洞

Poly EagleEye Director is a conference camera system with automated people tracking capabilities from Poly, Inc. An operating system command injection vulnerability exists in Poly EagleEye Director II version 2.2.1.1, which stems from the presence of multiple authenticated remote command injectio...

Poly EagleEye Director II 2.2.1.1 Command Injection / Authentication Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Critical Vulnerabilities product: Poly EagleEye Director II vulnerable version: 2.2.1.1 Jul 1, 2021 fixed version: 2.2.2.1 or higher CVE number: CVE-2022-26479,...