Polycom vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-34093 An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet.High 7.5 · Jul 10, 2025
• CVE-2021-41322 Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.High 8.8 · Oct 4, 2021
• CVE-2019-11355 An issue was discovered in Poly (formerly Polycom) HDX 3.1.13.High 7.2 · Mar 12, 2020
• CVE-2012-6611 An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14Critical 9.8 · Feb 10, 2020
• CVE-2012-6610 Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semiHigh 8.8 · Jan 28, 2020
• CVE-2012-6609 Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitraHigh 7.5 · Jan 28, 2020
• CVE-2019-14259 On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP address field for the "High 8 · Aug 1, 2019
• CVE-2019-12948 A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploiteHigh 8.3 · Jul 29, 2019
• CVE-2018-15128 An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and Pano 1.1.1 and earlier.Critical 9.8 · May 13, 2019
• CVE-2018-12592 Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explicitly chosen to turn High 7.5 · Jun 20, 2018
• CVE-2018-7565 CSRF exists on Polycom QDX 6000 devices.High 8.8 · Mar 7, 2018
• CVE-2015-4685 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cHigh 7 · Sep 19, 2017
• CVE-2015-4683 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use oCritical 9.8 · Sep 19, 2017
• CVE-2015-4681 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.High 7.8 · Sep 19, 2017
• CVE-2015-8300 Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program Files (x86)\polycom\polycom btoe connector\plcmbtoesrv.exe," whiHigh 7.8 · Aug 28, 2017
• CVE-2017-12857 Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnHigh 8.8 · Aug 25, 2017
• CVE-2007-3368 Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device rHigh 7.8 · Jun 22, 2007
• CVE-2007-3369 Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (High 7.8 · Jun 22, 2007
• CVE-2006-5233 Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sentHigh 7.8 · Oct 10, 2006
• CVE-2002-0626 Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.High 10 · Jan 7, 2003
• CVE-2002-0627 The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.High 7.5 · Jan 7, 2003
• CVE-2002-0628 The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to gueHigh 7.5 · Jan 7, 2003