Search vulnerabilities

Results 2

Export CSV
CVE-2022-26481

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2024-9579

Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors