Poly records

13 published records for vendor poly.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-26479No exploit	An issue was discovered in Poly EagleEye Director II before 2.2.2.1.poly · eagleeye director ii firmware · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.8	—	2.1%	Jul 17, 2022
36Monitor	CVE-2018-17875No exploit	A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commandspoly · trio 8800 firmware RCE	High8.8	—	2.7%	Dec 28, 2021
35Monitor	CVE-2022-26482No exploit	An issue was discovered in Poly EagleEye Director II before 2.2.2.1.poly · eagleeye director ii firmware · CWE-78 RCE Command injection	High7.2	—	22.8%	Jul 17, 2022
35Monitor	CVE-2022-26481No exploit	An issue was discovered in Poly Studio before 3.7.0.poly · studio x30 firmware · CWE-78 RCE Command injection	High8.8	—	1.5%	Jul 17, 2022
30Monitor	CVE-2023-4463No exploit	Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP Header denial of servicepoly · ccx 400 firmware · CWE-404 Pre-auth Denial of service	High7.5	—	1.0%	Dec 29, 2023
30Monitor	CVE-2023-4468No exploit	Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorizationpoly · trio 8800 firmware · CWE-862 Broken access control (IDOR)	High7.6	—	0.3%	Dec 29, 2023
29Monitor	CVE-2023-4464No exploit	Poly VVX 601 Diagnostic Telnet Mode os command injectionpoly · ccx 400 firmware · CWE-78 RCE Command injection	High7.2	—	3.3%	Dec 29, 2023
29Monitor	CVE-2021-37145No exploit	A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attackerpoly · cx5500 firmware · CWE-77 RCE Command injection	High7.2	—	2.0%	Sep 7, 2021
26Monitor	CVE-2023-4465No exploit	Poly VVX 601 Configuration File Import unverified password changepoly · ccx 400 firmware · CWE-620	Medium6.5	—	0.5%	Dec 29, 2023
26Monitor	CVE-2023-4467No exploit	Poly Trio 8800 Test Automation Mode backdoorpoly · trio 8800 firmware · CWE-912	Medium6.6	—	0.3%	Dec 29, 2023
23Monitor	CVE-2023-4462No exploit	Poly VVX 601 Web Configuration Application random valuespoly · ccx 400 firmware · CWE-330 Pre-auth Weak crypto	Medium5.9	—	0.9%	Dec 29, 2023
21Monitor	CVE-2023-24282No exploit	An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.poly · trio 8800 firmware · CWE-79 RCE File upload XSS	Medium5.4	—	0.5%	Mar 8, 2023
19Monitor	CVE-2023-4466No exploit	Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanismpoly · ccx 400 firmware · CWE-693	Medium4.9	—	0.5%	Dec 29, 2023

CVE-2022-26479
40Plan
An issue was discovered in Poly EagleEye Director II before 2.2.2.1.
CriticalCVSS 9.8No exploitEPSS 2%
poly · eagleeye director ii firmwareJul 17, 2022
CVE-2018-17875
36Monitor
A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands
HighCVSS 8.8No exploitEPSS 3%
- RCE
poly · trio 8800 firmwareDec 28, 2021
CVE-2022-26482
35Monitor
An issue was discovered in Poly EagleEye Director II before 2.2.2.1.
HighCVSS 7.2No exploitEPSS 23%
- RCE
- Command injection
poly · eagleeye director ii firmwareJul 17, 2022
CVE-2022-26481
35Monitor
An issue was discovered in Poly Studio before 3.7.0.
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
poly · studio x30 firmwareJul 17, 2022
CVE-2023-4463
30Monitor
Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP Header denial of service
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
poly · ccx 400 firmwareDec 29, 2023
CVE-2023-4468
30Monitor
Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorization
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
poly · trio 8800 firmwareDec 29, 2023
CVE-2023-4464
29Monitor
Poly VVX 601 Diagnostic Telnet Mode os command injection
HighCVSS 7.2No exploitEPSS 3%
- RCE
- Command injection
poly · ccx 400 firmwareDec 29, 2023
CVE-2021-37145
29Monitor
A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attacker
HighCVSS 7.2No exploitEPSS 2%
- RCE
- Command injection
poly · cx5500 firmwareSep 7, 2021
CVE-2023-4465
26Monitor
Poly VVX 601 Configuration File Import unverified password change
MediumCVSS 6.5No exploitEPSS 0%
poly · ccx 400 firmwareDec 29, 2023
CVE-2023-4467
26Monitor
Poly Trio 8800 Test Automation Mode backdoor
MediumCVSS 6.6No exploitEPSS 0%
poly · trio 8800 firmwareDec 29, 2023
CVE-2023-4462
23Monitor
Poly VVX 601 Web Configuration Application random values
MediumCVSS 5.9No exploitEPSS 1%
- Pre-auth
- Weak crypto
poly · ccx 400 firmwareDec 29, 2023
CVE-2023-24282
21Monitor
An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.
MediumCVSS 5.4No exploitEPSS 0%
poly · trio 8800 firmwareMar 8, 2023
CVE-2023-4466
19Monitor
Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanism
MediumCVSS 4.9No exploitEPSS 1%
poly · ccx 400 firmwareDec 29, 2023