8.8
CVSSv3

CVE-2017-12857

Published: 25/08/2017 Updated: 13/09/2017
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote malicious user to read a segment of the phone's memory which could contain an administrator's password or other sensitive information.

Vulnerable Product Search on Vulmon Subscribe to Product

polycom unified_communications_software