CVE-2018-14934

Vulnerability

The Bluetooth subsystem in Polycom Trio devices running software versions prior to 5.5.4 suffers from an incorrect access control vulnerability [1]. The flaw allows any Bluetooth-enabled device to connect to the Trio without requiring authentication or pairing, bypassing intended security controls.

Exploitation

An attacker only needs to be within Bluetooth range of a vulnerable Polycom Trio device. No prior authentication, user interaction, or special privileges are required. The attacker can initiate a Bluetooth connection and, once connected, access the device's microphone to capture audio [1].

Impact

Successful exploitation enables the attacker to record audio from the device's microphone, leading to unauthorized disclosure of sensitive conversations occurring in the vicinity of the Trio device. This compromises confidentiality of audio data [1].

Mitigation

Polycom released firmware version 5.5.4 to address this vulnerability. Users should update their Trio devices to this version or later. No workarounds are documented in the available reference [1].