CVE-2012-6610: Polycom Hdx Video End Points

High severity, CVSS 8.8. EPSS: 10.9% chance of exploitation in the next 30 days.

Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.

Affected products

• Polycom Hdx Video End Points: before 3.0.4 (fixed in 3.0.4)
• Polycom Uc Apl: before 2.7.1.j (fixed in 2.7.1.j)

Published 2020-01-28. Last modified 2026-06-16.