Polycom Unified Communications Software
6 CVEs affecting Polycom Unified Communications Software. Latest disclosed: 2019-07-29. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12857 | High | 8.8 | 2017-08-25 | Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vul… |
CVE-2019-12948 | High | 8.3 | 2019-07-29 | A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploit… |
CVE-2019-10688 | Medium | 6.8 | 2019-04-23 | VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded cre… |
CVE-2019-10689 | Medium | 6.5 | 2019-06-24 | VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides in… |
CVE-2018-18568 | Medium | 5.9 | 2018-10-24 | Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to… |
CVE-2018-18566 | Medium | 5.3 | 2018-10-24 | The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by levera… |