PT-2025-5701 · Poly · Poly Edge E

Published 2025-02-04 · Updated 2025-02-05 · CVE-2025-0858

Positive Technologies (AI Summary)

CVSS v2.0

6.7

Medium

Base vector

AV:A/AC:L/Au:S/C:C/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Poly Edge E devices versions up to 8.2.1.0820

Description: A flaw in the firmware does not properly prevent path traversal, which could lead to information disclosure.

Recommendations: For versions up to 8.2.1.0820, update the firmware to a version that properly prevents path traversal to prevent information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

CWE-35

Related Identifiers

BDU:2025-06215

CVE-2025-0858

Affected Products

Poly Edge E

References · 6

• https://bdu.fstec.ru/vul/2025-06215 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-0858 · Security Note
• https://twitter.com/CVEnew/status/1887149377661141295 · Twitter Post
• https://support.hp.com/lt-en/document/ish_11926124-11926148-16/hpsbpy03996 · Note
• https://support.hp.com/us-en/document/ish_11926124-11926148-16/hpsbpy03996 · Note
• https://t.me/cvedetector/17294 · Telegram Post