CVE-2021-37145

Poly CX5500 and CX5100 (version 1.3.5) expose a command-injection vulnerability over an authenticated Telnet session, enabling Privilege Escalation and Remote Code Execution. Root cause: unauthenticated? no, authenticated Telnet path; exploitation details not fully specified in the provided docum...