Polycom Obihai OBi1022 Firmware 5.1.11
Approved changes feed: RSS · Atom
cpe:2.3:o:polycom:obihai_obi1022_firmware:5.1.11:*:*:*:*:*:*:*
part: o version: 5.1.11 update: *
| Vendor | Polycom (e3e1cb67-ccd7-5fd1-af28-6973990bb1ca) |
|---|---|
| Product | Obihai Obi1022 Firmware (6dc791b7-bc53-55a2-a043-df32b45e51fe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-14259 |
vulnerable | 2026-06-08 05:12:54.347067 |
Details available
On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP address field for the "Time Service Settings web" interface allows an authenticated remote attacker in the same network to trigger OS commands via shell commands in a POST request.
Published: 2019-08-01T14:44:12.000Z
Updated: 2024-08-05T00:12:43.194Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.