CVE-2012-6610 Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.
HighCVSS 8.8
EPSS 10.9%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom hdx video end points | < 3.0.4 | 3.0.4 |
| polycom uc apl | < 2.7.1.j | 2.7.1.j |
References
- seclists.org mailing-list third-party-advisory
- web.archive.org third-party-advisory