Hdx System Software
Approved changes feed: RSS · Atom
cpe:2.3:a:polycom:hdx_system_software:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Polycom (e3e1cb67-ccd7-5fd1-af28-6973990bb1ca) |
|---|---|
| Product | Hdx System Software (48d89565-2c67-507d-a8d0-a03d28e10c82) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-11355 |
vulnerable | 2026-06-08 05:12:36.930033 |
Details available
An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator's page. The value received from the user is the factor value of a shell script on the equipment. By entering a special character (such as a single quote) in a CN or other CSR field, one can insert a command into a factor value. A system command can be executed as root.
Published: 2020-03-12T20:56:02.000Z
Updated: 2024-08-04T22:48:09.174Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6611 |
vulnerable | 2026-06-08 05:03:01.243761 |
Details available
An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password.
Published: 2020-02-10T14:47:38.000Z
Updated: 2024-08-06T21:36:01.030Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4970 |
vulnerable | 2026-06-08 05:02:53.483212 |
Details available
Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-01-01T11:00:00.000Z
Updated: 2024-08-06T20:50:18.423Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.