PT-2023-8564 · Poly · Poly Trio 8800

Christoph Wolff + 1 · Published 2023-12-29 · Updated 2024-05-17 · CVE-2023-4467

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Poly Trio 8800 version 7.2.6.0019

Description A critical issue was found in the Test Automation Mode component of the Poly Trio 8800, which can be manipulated to create a backdoor. The attack can be launched on the physical device. Additionally, there is a vulnerability related to undocumented configuration commands in the Poly Lens Management Cloud Registration component of Poly Trio phones and acoustic systems for conference calls, which can allow an attacker to elevate their privileges.

Recommendations For Poly Trio 8800 version 7.2.6.0019, consider disabling the Test Automation Mode until a patch is available to prevent potential backdoor exploitation. Restrict access to the Poly Lens Management Cloud Registration component to minimize the risk of privilege elevation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

BDU:2024-01179

CVE-2023-4467

Affected Products

Poly Trio 8800

References · 11

• 🔥 https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-4467 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4467 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01179 · Security Note
• https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html · Note
• https://modzero.com/en/advisories/mz-23-01-poly-voip · Note
• https://t.me/cibsecurity/73934 · Telegram Post
• https://vuldb.com/?ctiid.249260 · Note
• https://vuldb.com/?id.249260 · Note
• https://twitter.com/VulmonFeeds/status/1740698283247276403 · Twitter Post
• https://twitter.com/CVEnew/status/1740672086048424197 · Twitter Post