PT-2019-11995
CVE-2019-10689
·
Published
2019-06-24
·
Updated
2019-06-27
Description by
CVSS 3.1
6.5
MediumMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Polycom VVX products using UCS software version 5.9.2 and earlier
Polycom VVX products using Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier
Description
The issue results in insufficient authentication between the BToE application and the BToE component, leading to leakage of sensitive information.
Recommendations
For Polycom VVX products using UCS software version 5.9.2 and earlier, update the UCS software to a version later than 5.9.2.
For Polycom VVX products using Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier, update the BToE application to a version later than 3.9.1.
Found an issue in the description? Have something to add? Feel free to write us 👾