CVE-2019-10689

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.72%

Published

Jun 24, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information.

Weaknesses (CWE)

CWE-287

Affected Products (2)

polycom · better_together_over_ethernet_connectorvulnerable

polycom · unified_communications_softwarevulnerable

References (4)

http://www.securityfocus.com/bid/108799

Third Party AdvisoryVDB Entry

https://support.polycom.com/content/dam/polycom-support/global/documentation/insufficient-authentication-leakage-vvx-products.pdf

Vendor Advisory

http://www.securityfocus.com/bid/108799

Third Party AdvisoryVDB Entry

https://support.polycom.com/content/dam/polycom-support/global/documentation/insufficient-authentication-leakage-vvx-products.pdf

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs