Trio 8500 Firmware
by Polycom
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-14934 | Med | 0.42 | 6.5 | 0.01 | Nov 15, 2018 | The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone. | ||
| CVE-2018-14935 | Med | 0.40 | 6.1 | 0.01 | Nov 15, 2018 | The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS. |
- risk 0.42cvss 6.5epss 0.01
The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone.
- risk 0.40cvss 6.1epss 0.01
The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS.