CVE-2023-4466: Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanism
First published: Fri Dec 29 2023(Updated: )
A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation leads to protection mechanism failure. The attack can be launched remotely. The vendor explains that they do not regard this as a vulnerability as this is a feature that they offer to their customers who have a variety of environmental needs that are met through different firmware builds. To avoid potential roll-back attacks, they remove vulnerable builds from the public servers as a remediation effort. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249259.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Poly CCX 400 firmware | ||
| Poly CCX 400 firmware | ||
| All of | ||
| Zoom Poly CCX 600 Firmware | ||
| Zoom Poly CCX 600 Firmware | ||
| All of | ||
| Poly Trio 8800 firmware | ||
| Poly Trio 8800 firmware | ||
| All of | ||
| Poly Trio C60 firmware | ||
| Poly Trio C60 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-4466?
CVE-2023-4466 is classified as a problematic vulnerability affecting certain Poly devices.
How does CVE-2023-4466 affect Poly devices?
CVE-2023-4466 affects the web interface functionality, leading to potential protection mechanism failure.
What Poly devices are impacted by CVE-2023-4466?
CVE-2023-4466 impacts the Poly CCX 400, CCX 600, Trio 8800, and Trio C60 devices.
How can I mitigate CVE-2023-4466?
Mitigation for CVE-2023-4466 involves applying security updates provided by Poly for the affected devices.
Is there a known workaround for CVE-2023-4466?
Currently, there are no specific workarounds for CVE-2023-4466; applying patches is recommended.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/title
- agent/weakness
- agent/author
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/poly
- canonical/poly ccx 400 firmware
- canonical/zoom poly ccx 600 firmware
- canonical/poly trio 8800 firmware
- canonical/poly trio c60 firmware