Skip to content
OpenAdvisories
High WID-SEC-2024-1794 4 CVEs

Poly Clariti: Mehrere Schwachstellen

Published Aug 7, 2024 · Updated Aug 7, 2024 · de-DE

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Poly Clariti ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, um Sicherheitsmaßnahmen zu umgehen oder um beliebigen Code auszuführen.

Product

Poly Clariti ist eine Plattform für private Videokonferenzen.

Vulnerabilities 4

  • Critical 9.8

    A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware fla…

  • High 8.8

    Clariti Manager – Arbitrary File Upload

    A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input.

  • Medium 6.1

    A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware con…

  • Medium 5.4

    A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does no…

Revision history

  1. #1

    Initiale Fassung

References