Medium severity6.8NVD Advisory· Published Apr 23, 2019· Updated Jun 17, 2026

CVE-2019-10688

Description

VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded credentials to establish connections between the host application and the device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Polycom/Better Together Over Ethernet Connector2 versions
cpe:2.3:a:polycom:better_together_over_ethernet_connector:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:polycom:better_together_over_ethernet_connector:*:*:*:*:*:*:*:*range: <=3.8.0
- (no CPE)range: <= 3.9.1
Polycom/Unified Communications Software
cpe:2.3:a:polycom:unified_communications_software:*:*:*:*:*:*:*:*
Range: <=5.8.0
Polycom/VVX productsllm-create
Range: <= UCS 5.9.2 with BToE 3.9.1

Patches

Vulnerability mechanics

References

support.polycom.com/content/dam/polycom-support/global/documentation/hard-coded-credentials-vulnerability-in-vvx-products.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000