Polycom Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	36
IP Phone Software	2

Product

Polycom Viewstation	8
Polycom Soundpoint IP 650	2
Polycom RealPresence Resource Manager	2
Polycom SoundPoint IP 601	2
Polycom VVX 500	2

Remediation

Official Fix	18
Temporary Fix	0
Workaround	0
Unavailable	2
Not Defined	18

Exploitability

High	0
Functional	0
Proof-of-Concept	6
Unproven	2
Not Defined	30

Access Vector

Not Defined	0
Physical	2
Local	2
Adjacent	2
Network	32

Authentication

Not Defined	0
High	2
Low	12
None	24

User Interaction

Not Defined	0
Required	4
None	34

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	16
≤7	8
≤8	10
≤9	2
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	10
≤7	10
≤8	10
≤9	0
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	8
≤6	10
≤7	4
≤8	10
≤9	2
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	8
≤8	2
≤9	4
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	8
<2k	14
<5k	16
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	38
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (28): BToE Connector (1), Group Series (1), HDX (1), Hdx System Software (1), MGC-25 (1), Obihai Obi1022 (1), Pano (1), Poly Trio 8800 (1), Poly VVX 400 (1), Poly VVX 410 (1), QDX 6000 (2), RealPresence CloudAXIS Suite (1), RealPresence Debut (2), RealPresence Resource Manager (5), RealPresence Trio (1), RealPresence Web Suite (1), SoundPoint IP 301 (1), SoundPoint IP 601 (1), SoundStation IP (1), Soundpoint IP 650 (1), Soundpoint VoIP Phone (1), TriO (2), UCS (1), VVX (3), VVX 500 (2), VVX 601 (2), Viavideo (2), Viewstation (5)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
12/28/2021	6.3	6.3	Polycom Poly Trio 8800 Ping Command Privilege Escalation	Unknown	Not Defined	Not Defined	0.00263	0.00	CVE-2018-17875
10/04/2021	5.5	5.3	Polycom Poly VVX 400/Poly VVX 410 POST Parameter access control	Unknown	Not Defined	Not Defined	0.00111	0.00	CVE-2021-41322
08/01/2019	7.1	7.1	Polycom Obihai Obi1022 NTP command injection	Unknown	Not Defined	Not Defined	0.00178	0.02	CVE-2019-14259
07/29/2019	7.3	7.3	Polycom UCS routine	Unknown	Not Defined	Not Defined	0.00244	0.00	CVE-2019-12948
06/24/2019	6.4	6.4	Polycom VVX BToE Application improper authentication	Unknown	Not Defined	Not Defined	0.00058	0.00	CVE-2019-10689
06/13/2019	4.4	4.2	Polycom RealPresence Debut Cookie input validation	Unknown	Not Defined	Official Fix	0.00063	0.00	CVE-2018-10947
06/13/2019	5.5	5.3	Polycom RealPresence Debut Admin Web UI Password credentials management	Unknown	Not Defined	Official Fix	0.00044	0.00	CVE-2018-10946
05/13/2019	8.5	8.5	Polycom Group Series/HDX/Pano Content Sharing memory corruption	Unknown	Not Defined	Not Defined	0.01050	0.00	CVE-2018-15128
04/23/2019	5.5	5.5	Polycom VVX BToE Application hard-coded credentials	Unknown	Not Defined	Not Defined	0.00070	0.00	CVE-2019-10688
11/15/2018	5.2	4.9	Polycom TriO Web Administration Console cross site scripting	Unknown	Not Defined	Official Fix	0.00078	0.00	CVE-2018-14935

27 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 27 results.

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!