CVE-2023-4465 A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX…
Description
A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600 and VVX 601. Affected is an unknown function of the component Configuration File Import. The manipulation of the argument device.auth.localAdminPassword leads to unverified password change. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249258 is the identifier assigned to this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Trio 8300 | Versions not published | |
| Trio 8500 | Versions not published | |
| Trio 8800 | Versions not published | |
| Trio C60 | Versions not published | |
| CCX 350 | Versions not published | |
| CCX 400 | Versions not published | |
| CCX 500 | Versions not published | |
| CCX 505 | Versions not published | |
| CCX 600 | Versions not published |
Show the 28 other branches Hide the 28 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| CCX 700 | Versions not published | |
| EDGE E100 | Versions not published | |
| EDGE E220 | Versions not published | |
| EDGE E300 | Versions not published | |
| EDGE E320 | Versions not published | |
| EDGE E350 | Versions not published | |
| EDGE E400 | Versions not published | |
| EDGE E450 | Versions not published | |
| EDGE E500 | Versions not published | |
| EDGE E550 | Versions not published | |
| VVX 101 | Versions not published | |
| VVX 150 | Versions not published | |
| VVX 201 | Versions not published | |
| VVX 250 | Versions not published | |
| VVX 300 | Versions not published | |
| VVX 301 | Versions not published | |
| VVX 310 | Versions not published | |
| VVX 311 | Versions not published | |
| VVX 350 | Versions not published | |
| VVX 400 | Versions not published | |
| VVX 401 | Versions not published | |
| VVX 410 | Versions not published | |
| VVX 411 | Versions not published | |
| VVX 450 | Versions not published | |
| VVX 500 | Versions not published | |
| VVX 501 | Versions not published | |
| VVX 600 | Versions not published | |
| VVX 601 | Versions not published |