Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.
References
Link | Resource |
---|---|
https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
https://support.polycom.com/content/support.html | Vendor Advisory |
https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
https://support.polycom.com/content/support.html | Vendor Advisory |
Configurations
History
21 Nov 2024, 06:26
Type | Values Removed | Values Added |
---|---|---|
References | () https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry | |
References | () https://support.polycom.com/content/support.html - Vendor Advisory |
08 Aug 2023, 14:22
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-Other |
17 Nov 2021, 22:19
Type | Values Removed | Values Added |
---|---|---|
Summary | Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process. |
17 Nov 2021, 15:19
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:polycom:vvx_410_firmware:*:*:*:*:*:*:*:* |
cpe:2.3:o:polycom:vvx_400_firmware:5.3.1:*:*:*:*:*:*:* cpe:2.3:o:polycom:vvx_410_firmware:5.3.1:*:*:*:*:*:*:* |
10 Nov 2021, 01:19
Type | Values Removed | Values Added |
---|---|---|
Summary | Polycom VVX 400/410 version 5.3.1 allows low-privileged users to change the Admin account password by modifying a POST parameter name during the password reset process. |
04 Nov 2021, 01:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process. |
14 Oct 2021, 19:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Polycom VVX 400/410 version 5.3.1 allows low-privileged users to change the Admin account password by modifying a POST parameter name during the password reset process. |
13 Oct 2021, 14:22
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:polycom:vvx_400:-:*:*:*:*:*:*:* cpe:2.3:o:polycom:vvx_400_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:polycom:vvx_410_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:polycom:vvx_410:-:*:*:*:*:*:*:* |
|
References | (MISC) https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry | |
References | (MISC) https://support.polycom.com/content/support.html - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 8.8 |
CWE | CWE-269 |
04 Oct 2021, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-10-04 06:15
Updated : 2024-11-21 06:26
NVD link : CVE-2021-41322
Mitre link : CVE-2021-41322
CVE.ORG link : CVE-2021-41322
JSON object : View
Products Affected
polycom
- vvx_400_firmware
- vvx_410_firmware
- vvx_410
- vvx_400
CWE