Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-24	CVE-2018-18568	Improper Certificate Validation vulnerability in Polycom Unified Communications Software Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credential information by leveraging failure to validate X.509 certificates when used with an on-premise installation with Skype for Business. network polycom CWE-295	4.3
2018-10-24	CVE-2018-18566	Information Exposure vulnerability in Polycom Unified Communications Software The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business. network low complexity polycom CWE-200	5.0