CVE-2024-9579CWE-77
Certain Poly Video Conference Devices – Potential Remote Code Execution
High · published November 5, 2024
What it is
A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00401 · 33.2th percentile
- Weakness
- CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
- Published
- 2024-11-05T16:22Z
EPSS history
Timeline