CVE-2023-4463

Published: Dec 29, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256.

Affected (4)

Products: Poly: Ccx 400 Firmware, Ccx 600 Firmware, Trio 8800 Firmware, Trio C60 Firmware

4 products

Ccx 400 Firmware

Ccx 600 Firmware

Trio 8800 Firmware

Trio C60 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Poly Ccx 400 Firmware	All versions

Running on/with	Platform Versions
Poly Ccx 400	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Poly Ccx 600 Firmware	All versions

Running on/with	Platform Versions
Poly Ccx 600	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Poly Trio 8800 Firmware	All versions

Running on/with	Platform Versions
Poly Trio 8800	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Poly Trio C60 Firmware	All versions

Running on/with	Platform Versions
Poly Trio C60	All versions

Related CWEs

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

References (11)

https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html

Source: cna@vuldb.com

Not Applicable

https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices

Source: cna@vuldb.com

https://modzero.com/en/advisories/mz-23-01-poly-voip/

Source: cna@vuldb.com

https://vuldb.com/?ctiid.249256

Source: cna@vuldb.com

Permissions Required

https://vuldb.com/?id.249256

Source: cna@vuldb.com

Third Party Advisory

https://modzero.com/en/blog/multiple-vulnerabilities-in-poly-products/

Source: nvd@nist.gov

ExploitThird Party Advisory

https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices

Source: af854a3a-2127-422b-91ae-364da2661108

https://modzero.com/en/advisories/mz-23-01-poly-voip/

Source: af854a3a-2127-422b-91ae-364da2661108

https://vuldb.com/?ctiid.249256

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

https://vuldb.com/?id.249256

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.