Browse CVEs

HIGH 8.8 CVE-2021-41322 Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset proces… Vvx 400 Firmware No fix yet Fix from $1,9502021-10-04 HIGH 8.0 CVE-2019-14259 On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP address fiel… Obihai Obi1022 Firmware No fix yet Fix from $1,9502019-08-01 HIGH 8.8 CVE-2018-7565 CSRF exists on Polycom QDX 6000 devices. Qdx 6000 Firmware No fix yet Fix from $1,9502018-03-07 MEDIUM 6.1 CVE-2018-7564 Stored XSS exists on Polycom QDX 6000 devices. Qdx 6000 Firmware Mitigation only Fix from $1,6002018-03-07 HIGH 7.8 CVE-2007-3368 Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of servic… Soundpoint Ip 650 Mitigation only Fix from $1,9502007-06-22 HIGH 7.8 CVE-2007-3369 Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial o… Soundpoint Ip 601 Mitigation only Fix from $1,9502007-06-22 HIGH 7.8 CVE-2006-5233 Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a lo… Soundpoint Ip 301 Mitigation only Fix from $1,9502006-10-11 MEDIUM 5.0 CVE-2003-0556 Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demons… Mgc 100 Mitigation only Fix from $1,6002003-08-18