Medium severity5.3NVD Advisory· Published Oct 24, 2018· Updated Jun 17, 2026
CVE-2018-18566
CVE-2018-18566
Description
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*Range: <=5.8.0.12848
- cpe:2.3:o:polycom:vvx_500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:polycom:vvx_601_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- seclists.org/bugtraq/2018/Oct/33nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-028.txtnvdExploitThird Party Advisory
- www.securityfocus.com/bid/105746nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.