CVE-2018-14934: Medium severity polycom trio 8500 firmware vulnerability
Published Nov 15, 2018
·Updated
The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone.
Affected Software
2 affected components
Polycom Trio 8500 Firmware<5.5.4
Polycom Trio 8500
Event History
Nov 15, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14934?
CVE-2018-14934 is classified as a high severity vulnerability due to its impact on the security of audio data.
2
How do I fix CVE-2018-14934?
To fix CVE-2018-14934, update your Polycom Trio 8500 firmware to version 5.5.4 or later.
3
What devices are affected by CVE-2018-14934?
CVE-2018-14934 affects Polycom Trio 8500 devices running firmware versions prior to 5.5.4.
4
What is the main issue described in CVE-2018-14934?
The main issue in CVE-2018-14934 is incorrect access control in the Bluetooth subsystem, allowing unauthorized connections.
5
Can CVE-2018-14934 allow attackers to compromise sensitive information?
Yes, CVE-2018-14934 allows attackers to connect without authentication and potentially record sensitive audio data.