44 matches found
CVE-2012-6609: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in agetlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
PT-2019-9090
Name of the Vulnerable Software and Affected Versions Polycom Group Series versions 6.1.6.1 and earlier Polycom HDX versions 3.1.12 and earlier Polycom Pano versions 1.1.1 and earlier Description A remote code execution issue exists in the content sharing functionality due to a Buffer Overflow...
Polycom HDX Operating System Command Injection Vulnerability
Polycom HDX is a high-definition video conferencing system from Polycom. A security vulnerability exists in Polycom HDX. An attacker could exploit the vulnerability to execute system commands with root privileges...
CVE-2012-6610
creationtimestamp| type| source ---|---|--- 2018-11-05 22:04:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/polycomhdxauthbypass.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:50:38+00:00| seen|...
CVE-2025-34093
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/polycomhdxtracerouteexec.rb 2025-10-23 21:13:04+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:50:38+00:00| seen...
Polycom HDX Endpoint Remote Code Execution Vulnerability
Polycom HDX is a high definition series of network cameras. A remote code execution vulnerability exists in the Polycom HDX endpoint. An attacker can exploit the vulnerability to execute arbitrary code within the context of an application. A failed exploit attack could result in a denial of servi...
Polycom HDX Default Credentials (Telnet)
The Polycom device has default telnet credentials or passwordless login. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenSSL Memory Leak Vulnerability in Polycom HDX Series Video Conferencing Systems
The Polycom HDX Series of products are multipoint video conferencing system servers that provide easy-to-manage multipoint video and integrated conferencing services for next-generation real-time media conferencing platforms. An OpenSSL memory leak vulnerability exists in the Polycom HDX Series...
Polycom HDX Telnet Authorization Bypass
No description provided by source. ======================================================================== = Polycom HDX Telnet Authorization Bypass = = Vendor Website: = www.polycom.com = = Affected Version: = Polycom HDX devices: = All releases prior to and including Commercial 3.0.5 = = Publi...
Polycom HDX < 3.1.1.2 Multiple Vulnerabilities
According to its self-reported version number, the firmware installed on the remote host is affected by multiple vulnerabilities : - A command shell authorization bypass vulnerability exists that could be used by a malicious user to gain unauthorized access to the system, which could result in...
Polycom HDX multiple security vulnerabilities
Format string vulnerability, SQL injection, code execution, privilege escalation...
n.runs-SA-2013.003 - Polycom - H.323 CDR Database SQL Injection
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2013.003 15-Mar-2013 Vendor: Polycom, http://www.polycom.com Affected Products: Polycom HDX Series Affected Version: 3.1.1.2 Vulnerability: Polycom H.323 CDR Database SQL Injection Risk: HIGH Overview: For every received H.323 SETUP...
n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2013.001 15-Mar-2013 Vendor: Polycom, http://www.polycom.com Affected Products: Polycom HDX Series Affected Version: 3.1.1.2 Vulnerability: Polycom Command Shell Grants System-Level Access Risk: LOW Overview: The Polycom Command Shell ...
Polycom H.323 CDR Database SQL Injection
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2013.003 15-Mar-2013 Vendor: Polycom, http://www.polycom.com Affected Products: Polycom HDX Series Affected Version: 3.1.1.2 Vulnerability: Polycom H.323 CDR Database SQL Injection Risk: HIGH Overview: For every received H.323 SETUP...
Polycom Firmware Update Command Injection
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2013.002 15-Mar-2013 Vendor: Polycom, http://www.polycom.com Affected Products: Polycom HDX Series Affected Version: 3.1.1.2 Vulnerability: Polycom Firmware Update Command Injection Risk: MEDIUM Overview: Polycom HDX systems can be...
Polycom HDX - Telnet Authentication Bypass (Metasploit)
Polycom HDX - Telnet Authentication Bypass Metasploit ======================================================================== = Polycom HDX Telnet Authorization Bypass = = Vendor Website: = www.polycom.com = = Affected Version: = Polycom HDX devices: = All releases prior to and including...
Polycom HDX Telnet Authorization Bypass Vulnerability
The Polycom HDX is a series of telecommunication and video devices. The telnet component of Polycom HDX video endpoint devices is vulnerable to an authorization bypass when multiple simultaneous connections are repeatedly made to the service, allowing remote network attackers to gain full access ...
CVE-2012-4970
Cross-site scripting XSS vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-4970
Cross-site scripting XSS vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...