Name of the Vulnerable Software and Affected Versions: Poly VVX, CCX and Trio IP phones (affected versions not specified)

Description: The issue is related to insufficient access control in the Zero Touch Provisioning (ZTP) Service of the Poly VVX, CCX, and Trio IP phones' firmware. It may allow a remote attacker to gain unauthorized access to sensitive information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.