medium5.3
CVE-2018-18566
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by levera…
Impact
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Polycom | Unified Communications Software | through 5.8.0.12848 |
| Polycom | Vvx 601 Firmware | All versions |
| Polycom | Vvx 500 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105746
- https://seclists.org/bugtraq/2018/Oct/33
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-028.txt
- http://www.securityfocus.com/bid/105746
- https://seclists.org/bugtraq/2018/Oct/33
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-028.txt