CVE-2023-4468: Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorization

Description

A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly Lens Management Cloud Registration. The manipulation leads to missing authorization. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier VDB-249261 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack vector

Physical

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 17% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

T8

Trio 8500 · Poly

All versions, or not specified · source: vendor

T8

Trio 8800 · Poly

All versions, or not specified · source: vendor

TC

Trio C60 · Poly

All versions, or not specified · source: vendor, NVD

LE

Lens · Poly

All versions, or not specified · source: NVD

T8

Trio 8800 Firmware · Poly

All versions, or not specified · source: NVD