Medium severity5.9NVD Advisory· Published Oct 24, 2018· Updated Jun 17, 2026
CVE-2018-18568
CVE-2018-18568
Description
Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*Range: <=5.8.0.12848
- cpe:2.3:o:polycom:vvx_500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:polycom:vvx_601_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- seclists.org/bugtraq/2018/Oct/36nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-027.txtnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.