CVE-2025-14432

Poly Video - Sensitive Data Might Be Written to Log File

Published Dec 16, 2025 CVSS 4.0 · 8.1 High EPSS < 1% KEV · Not listed
Description
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Hp poly Eagleeye Iv
Hp poly Studio G7500
Hp poly Tc10
Hp poly Tc8
Hp poly Tcos
Hp poly Videoos
CPEs cpe:2.3:h:hp:poly_eagleeye_cube:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_eagleeye_iv:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_a2:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_e60:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_e70:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_g62:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_g7500:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_usb:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x30:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x32:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x50:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x52:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x70:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x72:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_tc10:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_tc8:-:*:*:*:*:*:*:*
cpe:2.3:o:hp:poly_tcos:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:poly_videoos:*:*:*:*:*:*:*:*
Vendors & Products Hp poly Eagleeye Iv
Hp poly Studio G7500
Hp poly Tc10
Hp poly Tc8
Hp poly Tcos
Hp poly Videoos
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'}

Type Values Removed Values Added
First Time appeared Hp
Hp poly Eagleeye Cube
Hp poly G7500
Hp poly Studio A2
Hp poly Studio E60
Hp poly Studio E70
Hp poly Studio G62
Hp poly Studio Usb
Hp poly Studio X30
Hp poly Studio X32
Hp poly Studio X50
Hp poly Studio X52
Hp poly Studio X70
Hp poly Studio X72
Hp polycom Eagleeye Iv
Hp tc10
Hp tc8
Vendors & Products Hp
Hp poly Eagleeye Cube
Hp poly G7500
Hp poly Studio A2
Hp poly Studio E60
Hp poly Studio E70
Hp poly Studio G62
Hp poly Studio Usb
Hp poly Studio X30
Hp poly Studio X32
Hp poly Studio X50
Hp poly Studio X52
Hp poly Studio X70
Hp poly Studio X72
Hp polycom Eagleeye Iv
Hp tc10
Hp tc8
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.
Title Poly Video - Sensitive Data Might Be Written to Log File
Weaknesses CWE-532
References
Metrics cvssV4_0

{'score': 8.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N'}