CVE-2012-6610: OS Command Injection
Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6610?
CVE-2012-6610 is classified as a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2012-6610?
To fix CVE-2012-6610, you should update the Polycom HDX Video End Points to version 3.0.4 or later and Polycom UC APL to version 2.7.1.J or later.
What types of devices are affected by CVE-2012-6610?
CVE-2012-6610 affects Polycom HDX Video End Points prior to version 3.0.4 and Polycom UC APL prior to version 2.7.1.J.
What is the impact of CVE-2012-6610?
The impact of CVE-2012-6610 includes the ability for remote authenticated users to execute arbitrary commands on the affected systems.
Who is at risk from CVE-2012-6610?
Users of affected Polycom devices who allow remote authenticated access are at risk from CVE-2012-6610.