Description
An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HP | VVX | < <UCS 6.4.8 | <UCS 6.4.8 |
| HP | Edge E | < <PVOS 8.5.0 | <PVOS 8.5.0 |
| HP | Trio 8300 | < <UCS 8.1.7.c | <UCS 8.1.7.c |