Skip to content

Polycom vulnerabilities

Newest

polycom hdx series Polycom HDX Series Telnet Command Injection via lan traceroute CVE-2025-34093 Public exploit 7.5 HighJuly 10, 2025
polycom vvx 400 firmware, vvx 410 firmware +1 more Poly VVX 400/410 through 5.3.1 allows low-privileged users to change the Admin password by... CVE-2021-41322 8.8 HighOctober 4, 2021
polycom hdx system software An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the... CVE-2019-11355 7.2 HighMarch 12, 2020
polycom hdx system software Polycom HDX Video End Points before 3.0 allows attackers to read arbitrary files via a .. (dot... CVE-2012-6611 9.8 CriticalFebruary 10, 2020
polycom hdx video end points, uc apl +1 more Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4... CVE-2012-6609 7.5 HighJanuary 28, 2020
polycom hdx video end points, uc apl +1 more Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated... CVE-2012-6610 Public exploit EPSS 10.9% 8.8 HighJanuary 28, 2020
polycom obihai obi1022 firmware On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input... CVE-2019-14259 8.0 HighAugust 1, 2019
polycom unified communications software, united communications software +1 more An RCE (Remote Code Execution) vulnerability exists in the UCS software through 6.0.0 used by... CVE-2019-12948 8.3 HighJuly 29, 2019
polycom better together over ethernet connector, unified communications software +1 more VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet... CVE-2019-10689 6.5 MediumJune 24, 2019
polycom realpresence debut firmware An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the... CVE-2018-10947 3.1 LowJune 13, 2019
polycom realpresence debut firmware An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that... CVE-2018-10946 6.8 MediumJune 13, 2019
polycom group series, hdx, pano +2 more An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and... CVE-2018-15128 9.8 CriticalMay 13, 2019
polycom better together over ethernet connector, unified communications software +1 more VVX products using UCS software version 5.8.0 and earlier with Better Together over Ethernet... CVE-2019-10688 6.8 MediumApril 23, 2019
polycom trio 8500 firmware The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS. CVE-2018-14935 6.1 MediumNovember 15, 2018
polycom trio 8500 firmware The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access... CVE-2018-14934 6.5 MediumNovember 15, 2018
polycom unified communications software, vvx 500 firmware, vvx 601 firmware +2 more Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to... CVE-2018-18568 5.9 MediumOctober 24, 2018
polycom unified communications software, vvx 500 firmware, vvx 601 firmware +2 more The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers... CVE-2018-18566 5.3 MediumOctober 24, 2018
polycom realpresence web suite Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon... CVE-2018-12592 7.5 HighJune 20, 2018
polycom qdx 6000 firmware CSRF exists on Polycom QDX 6000 devices. CVE-2018-7565 8.8 HighMarch 7, 2018
polycom qdx 6000 firmware Stored XSS exists on Polycom QDX 6000 devices. CVE-2018-7564 6.1 MediumMarch 7, 2018
polycom realpresence resource manager Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the... CVE-2015-4685 Public exploit 7.0 HighSeptember 19, 2017
polycom realpresence resource manager Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM)... CVE-2015-4684 Public exploit 6.5 MediumSeptember 19, 2017
polycom realpresence resource manager Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive... CVE-2015-4683 Public exploit 9.8 CriticalSeptember 19, 2017
polycom realpresence resource manager Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to... CVE-2015-4682 Public exploit 6.5 MediumSeptember 19, 2017
polycom realpresence resource manager Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have... CVE-2015-4681 Public exploit 7.8 HighSeptember 19, 2017
polycom btoe connector Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program... CVE-2015-8300 7.8 HighAugust 28, 2017
polycom unified communications software Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0... CVE-2017-12857 8.8 HighAugust 25, 2017
polycom realpresence cloudaxis suite Cross-site scripting (XSS) vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0... CVE-2015-1516 3.5 LowSeptember 3, 2015
polycom hdx system software Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End... CVE-2012-4970 4.3 MediumJanuary 1, 2013
polycom soundpoint ip 601 Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1... CVE-2007-3369 7.8 HighJune 22, 2007
polycom soundpoint ip 650 Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+... CVE-2007-3368 7.8 HighJune 22, 2007
polycom soundpoint ip 301 Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote... CVE-2006-5233 7.8 HighOctober 11, 2006
polycom mgc-100, mgc-25, mgc-50 +2 more Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of... CVE-2003-0556 5.0 MediumJuly 15, 2003
polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial... CVE-2002-0630 5.0 MediumJanuary 7, 2003
polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass... CVE-2002-0627 7.5 HighJanuary 7, 2003
polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial... CVE-2002-0629 5.0 MediumJanuary 3, 2003
polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed... CVE-2002-0628 7.5 HighJanuary 3, 2003
polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which... CVE-2002-0626 10.0 HighJanuary 3, 2003
polycom viavideo The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of... CVE-2002-1906 Public exploit 5.0 MediumDecember 31, 2002
polycom viavideo Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to... CVE-2002-1905 Public exploit 5.0 MediumDecember 31, 2002