← All advisories

Medium severity5.4NVD Advisory· Published Mar 8, 2023· Updated Jul 9, 2026

CVE-2023-24282

CVE-2023-24282

Description

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.

Affected products

3

Polycom/Trio 8800cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 7.2.2.1094
Polycom/Trio 8800 Firmware
cpe:2.3:o:poly:trio_8800_firmware:7.2.2.1094:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

www.cryptnetix.com/blog/2023/01/19/Polycom-Trio-Vulnerability-Disclosure.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.