CVE-2025-0858: Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User
Published Feb 5, 2025
·Updated
A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure.
Affected Software
1 affected component
Poly Firmware<=8.2.1.0820
Event History
Feb 5, 2025
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
DescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-0858?
CVE-2025-0858 has a medium severity rating due to its potential for information disclosure.
2
How do I fix CVE-2025-0858?
To fix CVE-2025-0858, upgrade the firmware of Poly Edge E devices to a version greater than 8.2.1.0820.
3
What type of devices are affected by CVE-2025-0858?
CVE-2025-0858 affects Poly Edge E devices that run firmware versions up to and including 8.2.1.0820.
4
What is the impact of CVE-2025-0858?
The impact of CVE-2025-0858 is that it allows unauthorized access through path traversal, potentially leading to information disclosure.
5
When was CVE-2025-0858 disclosed?
CVE-2025-0858 was disclosed recently as a firmware vulnerability in Poly Edge E devices.