PT-2019-11995

CVE-2019-10689

·

Published

2019-06-24

·

Updated

2019-06-27

Description by

CVSS 3.1
6.5
Medium
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Polycom VVX products using UCS software version 5.9.2 and earlier Polycom VVX products using Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier
Description The issue results in insufficient authentication between the BToE application and the BToE component, leading to leakage of sensitive information.
Recommendations For Polycom VVX products using UCS software version 5.9.2 and earlier, update the UCS software to a version later than 5.9.2. For Polycom VVX products using Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier, update the BToE application to a version later than 3.9.1.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾