PT-2019-11994 · Polycom · Polycom Vvx+1

Publicado 2019-04-23 · Atualizado 2019-06-17 · CVE-2019-10688

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Polycom VVX products versions prior to UCS 5.9.2

Description The issue concerns the use of hard-coded credentials to establish connections between the host application and the device in VVX products. This specifically affects versions including and prior to UCS 5.9.2 with the Better Together over Ethernet Connector (BToE) application 3.9.1.

Recommendations For versions prior to UCS 5.9.2, update to a version that does not use hard-coded credentials for establishing connections.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-10688

Produtos afetados

Better Together Over Ethernet Connector

Polycom Vvx

Referências · 3

• https://support.polycom.com/content/dam/polycom-support/global/documentation/hard-coded-credentials-vulnerability-in-vvx-products.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-10688 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10688 · Nota de Segurança