Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2022-26481

Published: 17/07/2022 Updated: 21/07/2022
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

An issue exists in Poly Studio prior to 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

poly studio_x30_firmware

poly studio_x70_firmware

poly g7500_firmware

poly studio_x50_firmware

Exploits

Exploit DB: Poly Studio X30 / Studio X50 / Studio X70 / G7500 Command Injection
Poly Studio X30, Studio X50, Studio X70, and G7500 versions 340-292042, 350-344025, and 360 suffers from an authenticated command injection vulnerability ...

References

CWE-78https://www.poly.com/us/en/support/security-centerhttps://sec-consult.com/vulnerability-lab/advisory/authenticated-command-injection-in-poly-studio/https://nvd.nist.govhttps://packetstormsecurity.com/files/167412/Poly-Studio-X30-Studio-X50-Studio-X70-G7500-Command-Injection.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248CVE-2024-3110CVE-2024-5552CVE-2024-29415HTML injectionCVE-2024-3095TCPtype confusionCVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook