Polycom Uc Apl vulnerabilities

2 CVEs affecting Polycom Uc Apl, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-6610, published 2020-01-28.

More from Polycom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-6610, published 2020-01-28. High severity, CVSS 8.8. EPSS: 10.9% chance of exploitation in the next 30 days. Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.
• CVE-2012-6609, published 2020-01-28. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. (dot dot) in the name…