Polycom Vvx 500 Firmware vulnerabilities

2 CVEs affecting Polycom Vvx 500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-18568, published 2018-10-24.

More from Polycom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-18566, published 2018-10-24. Medium severity, CVSS 5.3. EPSS: 2.8% chance of exploitation in the next 30 days. The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation…
• CVE-2018-18568, published 2018-10-24. Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days. Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used…