Vulnerabilities > CVE-2021-41322 - Unspecified vulnerability in Polycom VVX 400 Firmware and VVX 410 Firmware

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
polycom

Summary

Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.

Vulnerable Configurations

Part Description Count
OS
Polycom
2
Hardware
Polycom
2