Polycom Better Together Over Ethernet Connector vulnerabilities

2 CVEs affecting Polycom Better Together Over Ethernet Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10689, published 2019-06-24.

More from Polycom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-10689, published 2019-06-24. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the…
• CVE-2019-10688, published 2019-04-23. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded credentials to establish connections…