7.5
High
CVE-2024-9579 A potential vulnerability was discovered in certain Poly video conferencing devices
Description
A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Certain Poly Video Conference Devices | Versions not published | |
| tc8_firmware 6.3 | earliest → < 6.3.2 | 6.3.2 |
| tc10_firmware 6.3 | earliest → < 6.3.2 | 6.3.2 |
| g7500_firmware 4.3 | earliest → < 4.3.2 | 4.3.2 |
| studio_x30_firmware 4.3 | earliest → < 4.3.2 | 4.3.2 |
| studio_x50_firmware 4.3 | earliest → < 4.3.2 | 4.3.2 |
| studio_x70_firmware 4.3 | earliest → < 4.3.2 | 4.3.2 |
| studio_x52_firmware 4.3 | earliest → < 4.3.2 | 4.3.2 |
| studio_g62_firmware 4.3 | earliest → < 4.3.2 | 4.3.2 |