Polycom
24 CVEs across 108 Polycom products. Browse Polycom vulnerabilities, severities, and proof-of-concept exploits.
Polycom products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34093 | | 2025-07-10 | An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in… | |
CVE-2021-41322 | High | 8.8 | 2021-10-04 | Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process. |
CVE-2019-11355 | High | 7.2 | 2020-03-12 | An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the… |
CVE-2012-6611 | Critical | 9.8 | 2020-02-10 | An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.1… |
CVE-2012-6610 | High | 8.8 | 2020-01-28 | Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (sem… |
CVE-2012-6609 | High | 7.5 | 2020-01-28 | Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitr… |
CVE-2019-14259 | High | 8.0 | 2019-08-01 | On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP address field for the… |
CVE-2019-12948 | High | 8.3 | 2019-07-29 | A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploit… |
CVE-2019-10689 | Medium | 6.5 | 2019-06-24 | VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides in… |
CVE-2018-10947 | Low | 3.1 | 2019-06-13 | An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted. |
CVE-2018-10946 | Medium | 6.8 | 2019-06-13 | An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password… |
CVE-2018-15128 | Critical | 9.8 | 2019-05-13 | An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and Pano 1.1.1 and earlier. A remote code execution vulnerability… |
CVE-2019-10688 | Medium | 6.8 | 2019-04-23 | VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded cre… |
CVE-2018-14935 | Medium | 6.1 | 2018-11-15 | The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS. |
CVE-2018-14934 | Medium | 6.5 | 2018-11-15 | The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and sub… |
CVE-2018-18568 | Medium | 5.9 | 2018-10-24 | Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to… |
CVE-2018-18566 | Medium | 5.3 | 2018-10-24 | The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by levera… |
CVE-2018-12592 | High | 7.5 | 2018-06-20 | Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explicitly chosen to turn… |
CVE-2018-7565 | High | 8.8 | 2018-03-07 | CSRF exists on Polycom QDX 6000 devices. |
CVE-2018-7564 | Medium | 6.1 | 2018-03-07 | Stored XSS exists on Polycom QDX 6000 devices. |
CVE-2015-4685 | High | 7.0 | 2017-09-19 | Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/… |
CVE-2015-4684 | Medium | 6.5 | 2017-09-19 | Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitr… |
CVE-2015-4683 | Critical | 9.8 | 2017-09-19 | Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use… |
CVE-2015-4682 | Medium | 6.5 | 2017-09-19 | Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmR… |
CVE-2015-4681 | High | 7.8 | 2017-09-19 | Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords. |
CVE-2015-8300 | High | 7.8 | 2017-08-28 | Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program Files (x86)\polycom\polycom btoe connector\plcmbtoesrv.exe," wh… |
CVE-2017-12857 | High | 8.8 | 2017-08-25 | Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vul… |
CVE-2015-1516 | | 2015-09-03 | Cross-site scripting (XSS) vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script… | |
CVE-2012-4970 | | 2013-01-01 | Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial… | |
CVE-2007-3369 | | 2007-06-22 | Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service… | |
CVE-2007-3368 | | 2007-06-22 | Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device… | |
CVE-2006-5233 | | 2006-10-11 | Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sen… | |
CVE-2003-0556 | | 2003-08-18 | Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated usi… | |
CVE-2002-0630 | | 2003-01-07 | The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed ICMP packets. | |
CVE-2002-0629 | | 2003-01-07 | The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server. | |
CVE-2002-0628 | High | 7.5 | 2003-01-07 | The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to gu… |
CVE-2002-0627 | | 2003-01-07 | The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests. | |
CVE-2002-0626 | | 2003-01-07 | Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities. | |
CVE-2002-1906 | | 2002-12-31 | The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and… | |
CVE-2002-1905 | | 2002-12-31 | Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request. |