Vulnerabilities > Polycom > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-28 CVE-2015-8300 Permission Issues vulnerability in Polycom Btoe Connector 2.3.0
Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program Files (x86)\polycom\polycom btoe connector\plcmbtoesrv.exe," which allows local users to gain privileges via a Trojan horse file.
local
low complexity
polycom CWE-275
7.8
2017-08-25 CVE-2017-12857 Information Exposure vulnerability in Polycom Unified Communications Software
Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application.
network
low complexity
polycom CWE-200
8.8
2003-01-07 CVE-2002-0628 Improper Restriction of Excessive Authentication Attempts vulnerability in Polycom products
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
network
low complexity
polycom CWE-307
7.5