CVE-2015-8300 Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program Files (x86)\polycom\polycom btoe connector\plcmbtoesrv.exe," which allows local users to gain privileges...
HighCVSS 7.8
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program Files (x86)\polycom\polycom btoe connector\plcmbtoesrv.exe," which allows local users to gain privileges via a Trojan horse file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom btoe connector | <= 2.3.0 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20151124 CVE-2015-8300: Polycom BToE Connector v2.3.0 Privilege Escalation Vulnerability mailing-list third-party-advisory
- github.com