CVE-2019-11355

Affected software: Polycom HDX 3.1.13. Vulnerability: command injection via a crafted CSR field on the administrator page, where the user-provided value is treated as a shell-script factor value; inserting characters (e.g., a single quote) can cause arbitrary system commands to be executed. Root ...

CVE-2012-6611

Polycom Web Management Interface G3/HDX 8000 HD running Durango 2.6.0 4740 and embedded Polycom Linux Development Platform 2.14.g3 is affected. The issue is a default, blank administrative password that allows access without credential setup. CVSS metrics indicate network access, no user interact...

CVE-2012-4970

CVE-2012-4970 is a cross-site scripting (XSS) vulnerability in the web management interface of Polycom HDX Video End Points. Affected software includes UC APL prior to 2.7.1_J and commercial prior to 3.0.5. Polycom fixed the issue starting with commercial build 3.0.5 and UC APL 2.7.1.1_J; the spe...