CVE-2021-37145: Poly CX5100 Firmware
High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days.
A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attacker to Privilege Escalation and Remote Code Execution capability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Affected products
Published 2021-09-07. Last modified 2026-06-17.