unified_communications_software Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/unified_communications_software/ Sun, 26 Feb 2023 06:47:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png unified_communications_software Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/unified_communications_software/ 32 32 CVE-2018-18566 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-18566/ Sun, 26 Feb 2023 06:47:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-18566/ The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.

The post CVE-2018-18566 appeared first on CVE Vulnerability.

]]> The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.

The post CVE-2018-18566 appeared first on CVE Vulnerability.

]]> CVE-2018-18568 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-18568/ Sun, 26 Feb 2023 06:47:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-18568/ Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.

The post CVE-2018-18568 appeared first on CVE Vulnerability.

]]> Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business.

The post CVE-2018-18568 appeared first on CVE Vulnerability.

]]> CVE-2019-10688 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10688/ Sun, 26 Feb 2023 06:29:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10688/ VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded credentials to establish connections between the host application and the device.

The post CVE-2019-10688 appeared first on CVE Vulnerability.

]]> VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, use hard-coded credentials to establish connections between the host application and the device.

The post CVE-2019-10688 appeared first on CVE Vulnerability.

]]> CVE-2019-10689 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10689/ Sun, 26 Feb 2023 06:29:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10689/ VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information.

The post CVE-2019-10689 appeared first on CVE Vulnerability.

]]> VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information.

The post CVE-2019-10689 appeared first on CVE Vulnerability.

]]>