PT-2023-29275

CVE-2023-4463

Published

2023-12-29

Updated

2024-05-17

Description by

CVSS 2.0

5.0

Medium

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Poly CCX 400 (affected versions not specified) Poly CCX 600 (affected versions not specified) Poly Trio 8800 (affected versions not specified) Poly Trio C60 (affected versions not specified)

Description A vulnerability was found in the HTTP Header Handler component, where the manipulation of the Cookie argument leads to denial of service. The attack can be initiated remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Christoph Wolff

Pascal Zenker

Vendors

Affected products

Weakness enumeration

CWE-404: Improper Resource Shutdown or Release

Related identifiers