VAR-202112-2029
Vulnerability from variot - Updated: 2024-08-14 14:25A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors. Poly Trio 8800 Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Polycom Trio is a Trio series business conference phone from Polycom
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202112-2029",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.0.12856"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.5.4.2255"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.2.5400"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.5.9658"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.5.3.3441"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.5.3.3517"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.7.1.4145"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.3.2400"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.5.2.11338"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.0.12197"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.5.2.11391"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.3.2389"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.7.1.4095"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.4.7511"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.5.9111"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.1.17597"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.4.7776"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.7.1.4133"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.3.2007"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.0.12541"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 1.0,
"vendor": "poly",
"version": "5.4.4.7609"
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 0.8,
"vendor": "poly",
"version": null
},
{
"model": "trio 8800",
"scope": null,
"trust": 0.8,
"vendor": "poly",
"version": null
},
{
"model": "trio 8800",
"scope": "eq",
"trust": 0.8,
"vendor": "poly",
"version": "trio 8800 firmware"
},
{
"model": "trio",
"scope": "eq",
"trust": 0.6,
"vendor": "polycom",
"version": "88005.7.1.4145"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"cve": "CVE-2018-17875",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "CVE-2018-17875",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "CNVD-2022-09783",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2018-17875",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2018-17875",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-17875",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2018-17875",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2022-09783",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202112-2733",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "CNNVD",
"id": "CNNVD-202112-2733"
},
{
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors. Poly Trio 8800 Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Polycom Trio is a Trio series business conference phone from Polycom",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-17875"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"db": "VULMON",
"id": "CVE-2018-17875"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-17875",
"trust": 3.9
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2022-09783",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202112-2733",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2018-17875",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"db": "VULMON",
"id": "CVE-2018-17875"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "CNNVD",
"id": "CNNVD-202112-2733"
},
{
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"id": "VAR-202112-2029",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
}
],
"trust": 1.1416667
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
}
]
},
"last_update_date": "2024-08-14T14:25:05.242000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TRIO\u00a08800",
"trust": 0.8,
"url": "https://www.poly.com/jp/ja/products/phones/trio/trio-8800"
},
{
"title": "Patch for Polycom Trio Remote Code Execution Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/318846"
},
{
"title": "Polycom Trio Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=176419"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "CNNVD",
"id": "CNNVD-202112-2733"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "Lack of information (CWE-noinfo) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://unkl4b.github.io/authenticated-rce-in-polycom-trio-8800-pt-1/"
},
{
"trust": 1.7,
"url": "https://support.polycom.com/content/support/emea/emea/en/support/voice/polycom-trio/polycom-trio-8800.html"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-17875"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"db": "VULMON",
"id": "CVE-2018-17875"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "CNNVD",
"id": "CNNVD-202112-2733"
},
{
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"db": "VULMON",
"id": "CVE-2018-17875"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"db": "CNNVD",
"id": "CNNVD-202112-2733"
},
{
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-02-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"date": "2021-12-28T00:00:00",
"db": "VULMON",
"id": "CVE-2018-17875"
},
{
"date": "2023-01-17T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"date": "2021-12-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202112-2733"
},
{
"date": "2021-12-28T13:15:07.947000",
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-02-12T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-09783"
},
{
"date": "2021-12-28T00:00:00",
"db": "VULMON",
"id": "CVE-2018-17875"
},
{
"date": "2023-01-17T01:09:00",
"db": "JVNDB",
"id": "JVNDB-2018-016634"
},
{
"date": "2022-01-11T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202112-2733"
},
{
"date": "2022-01-10T13:58:42.737000",
"db": "NVD",
"id": "CVE-2018-17875"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202112-2733"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Poly\u00a0Trio\u00a08800\u00a0 Vulnerability in",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-016634"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202112-2733"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…