Polycom Hdx System Software vulnerabilities

3 CVEs affecting Polycom Hdx System Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11355, published 2020-03-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-6611, published 2020-02-10. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative…
CVE-2012-4970, published 2013-01-01. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote…
CVE-2019-11355, published 2020-03-12. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the…