Poly vulnerabilities
We track 7 vulnerabilities in Poly products across 52 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2024.
Latest Poly vulnerabilities
- 7.5 High severity
Certain Poly Video Conference Devices: Improper Neutralization of Special Elements used in a Command
A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.
- 7.8 High severity
Plantronics Hub: Improper Link Resolution Before File Access
Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privilege
- 7.6 High severity
Trio 8500: Missing Authorization
A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly Lens Management Cloud Registration. The manipulation leads to missing authorization. It is possible t
- 7.2 High severity
Trio 8300: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, E
- 7.5 High severity
CCX 400: Improper Resource Shutdown or Release
A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack c
- 8.8 High severity
Studio X30 Firmware: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.
- 9.8 Critical severity
Eagleeye Director Ii Firmware: Incorrect Authorization
An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor) causes all API calls to execute as admin without authentication.