CVE-2023-4466: Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanism
A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation leads to protection mechanism failure. The attack can be launched remotely. The vendor explains that they do not regard this as a vulnerability as this is a feature that they offer to their customers who have a variety of environmental needs that are met through different firmware builds. To avoid potential roll-back attacks, they remove vulnerable builds from the public servers as a remediation effort. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249259.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4466?
CVE-2023-4466 is classified as a problematic vulnerability affecting certain Poly devices.
How does CVE-2023-4466 affect Poly devices?
CVE-2023-4466 affects the web interface functionality, leading to potential protection mechanism failure.
What Poly devices are impacted by CVE-2023-4466?
CVE-2023-4466 impacts the Poly CCX 400, CCX 600, Trio 8800, and Trio C60 devices.
How can I mitigate CVE-2023-4466?
Mitigation for CVE-2023-4466 involves applying security updates provided by Poly for the affected devices.
Is there a known workaround for CVE-2023-4466?
Currently, there are no specific workarounds for CVE-2023-4466; applying patches is recommended.