← Back

CVE-2024-9579

nvd nist
Published: Nov 5, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 5.9
Source: NVD

Description

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.

Affected (8)

Hp
8 products
Poly Tc8 Firmware
Poly Tc10 Firmware
Poly Studio G7500 Firmware
Poly Studio X30 Firmware
Poly Studio X50 Firmware
Poly Studio X70 Firmware
Poly Studio X52 Firmware
Poly Studio G62 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Tc8 Firmware
Before 6.3.2
Running on/withPlatform Versions
Hp
Poly Tc8
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Tc10 Firmware
Before 6.3.2
Running on/withPlatform Versions
Hp
Poly Tc10
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Studio G7500 Firmware
Before 4.3.2
Running on/withPlatform Versions
Hp
Poly Studio G7500
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Studio X30 Firmware
Up to 4.3.2
Running on/withPlatform Versions
Hp
Poly Studio X30
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Studio X50 Firmware
Before 4.3.2
Running on/withPlatform Versions
Hp
Poly Studio X50
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Studio X70 Firmware
Before 4.3.2
Running on/withPlatform Versions
Hp
Poly Studio X70
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Studio X52 Firmware
Before 4.3.2
Running on/withPlatform Versions
Hp
Poly Studio X52
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poly Studio G62 Firmware
Before 4.3.2
Running on/withPlatform Versions
Hp
Poly Studio G62
All versions

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (1)

Source: hp-security-alert@hp.com
Vendor Advisory

Timeline

No history available yet.