NetSight
high8.3

CVE-2019-12948

A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploit…

Impact

A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote attacker with admin privileges to cause a denial of service (DoS) condition or execute arbitrary code.

Affected products

VendorProductAffected versions
PolycomUnified Communications Software
before 5.8.5.1256
from 5.9.3 before 5.9.3.2857
from 6.0.0 before 6.0.0.4839
PolycomUnited Communications Software
before 5.9.0
before 4.0.14.1580

Weakness classification

References