high8.8
CVE-2022-26481
An issue was discovered in Poly Studio before 3.7.0.
Impact
An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Poly | Studio X30 Firmware | before 3.7.0 |
| Poly | Studio X70 Firmware | before 3.7.0 |
| Poly | G7500 Firmware | before 3.7.0 |
| Poly | Studio X50 Firmware | before 3.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sec-consult.com/vulnerability-lab/advisory/authenticated-command-injection-in-poly-studio/
- https://www.poly.com/us/en/support/security-center
- https://sec-consult.com/vulnerability-lab/advisory/authenticated-command-injection-in-poly-studio/
- https://www.poly.com/us/en/support/security-center