Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
polycom unified communications software vulnerabilities and exploits
(subscribe to this query)
578
VMScore
CVE-2019-12948
A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote attacker with admin privileges to cause a denial of service (DoS) condition or e...
Polycom Unified Communications Software
Polycom United Communications Software
294
VMScore
CVE-2019-10689
VVX products using UCS software version 5.9.2 and previous versions with Better Together over Ethernet Connector (BToE) application version 3.9.1 and previous versions provides insufficient authentication between the BToE application and the BToE component, resulting in leakage o...
Polycom Better Together Over Ethernet Connector
Polycom Unified Communications Software
409
VMScore
CVE-2019-10688
VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded credentials to establish connections between the host application and the device.
Polycom Unified Communications Software
Polycom Better Together Over Ethernet Connector
445
VMScore
CVE-2018-18566
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and previous versions allow remote malicious users to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.
Polycom Unified Communications Software
Polycom Vvx 601 Firmware -
Polycom Vvx 500 Firmware -
383
VMScore
CVE-2018-18568
Polycom VVX 500 and 601 devices 5.8.0.12848 and previous versions allows man-in-the-middle malicious users to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.
Polycom Unified Communications Software
Polycom Vvx 601 Firmware -
Polycom Vvx 500 Firmware -
356
VMScore
CVE-2017-12857
Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote malicious user to read a ...
Polycom Unified Communications Software
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-33545
CVE-2024-35725
CVE-2024-32704
overflow
file upload
CVE-2024-0230
CVE-2024-32705
CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started