CVE-2018-14934

The CVE-2018-14934 entry concerns Polycom Trio devices with software versions prior to 5.5.4. The Bluetooth subsystem has Incorrect Access Control, allowing an attacker to connect without authentication and subsequently record audio from the device microphone. Impact is documented as partial conf...

CVE-2018-14935

The CVE-2018-14935 entry maps to a web-based XSS in the Web administration console of Polycom Trio devices running software before 5.5.4. Affected component: the web admin UI. Root cause: reflected/scripted input in the console without proper encoding. Impact: user-facing XSS could affect confide...