CVE-2019-12948 : A vulnerability in the web-based management interface of VVX, Trio, SoundStructu

A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote attacker with admin privileges to cause a denial of service (DoS) condition or execute arbitrary code.

Published 2019-07-29 16:15:13

Updated 2019-08-06 17:11:38

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2019-12948

Polycom » Unified Communications Software
Versions from including (>=) 6.0.0 and before (<) 6.0.0.4839
cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Polycom » C12 » Version: N/A
When used together with: Polycom » C16 » Version: N/A
When used together with: Polycom » C8 » Version: N/A
When used together with: Polycom » Vvx150 » Version: N/A
When used together with: Polycom » Vvx201 » Version: N/A
When used together with: Polycom » Vvx250 » Version: N/A
When used together with: Polycom » Vvx301 » Version: N/A
When used together with: Polycom » Vvx311 » Version: N/A
When used together with: Polycom » Vvx350 » Version: N/A
When used together with: Polycom » Vvx401 » Version: N/A
When used together with: Polycom » Vvx411 » Version: N/A
When used together with: Polycom » Vvx450 » Version: N/A
When used together with: Polycom » Vvx501 » Version: N/A
When used together with: Polycom » Vvx601 » Version: N/A
Polycom » Unified Communications Software
Versions before (<) 5.8.5.1256
cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Polycom » C12 » Version: N/A
When used together with: Polycom » C16 » Version: N/A
When used together with: Polycom » C8 » Version: N/A
When used together with: Polycom » Vvx150 » Version: N/A
When used together with: Polycom » Vvx201 » Version: N/A
When used together with: Polycom » Vvx250 » Version: N/A
When used together with: Polycom » Vvx301 » Version: N/A
When used together with: Polycom » Vvx311 » Version: N/A
When used together with: Polycom » Vvx350 » Version: N/A
When used together with: Polycom » Vvx401 » Version: N/A
When used together with: Polycom » Vvx411 » Version: N/A
When used together with: Polycom » Vvx450 » Version: N/A
When used together with: Polycom » Vvx501 » Version: N/A
When used together with: Polycom » Vvx601 » Version: N/A
Polycom » Unified Communications Software
Versions from including (>=) 5.9.3 and before (<) 5.9.3.2857
cpe:2.3:o:polycom:unified_communications_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Polycom » C12 » Version: N/A
When used together with: Polycom » C16 » Version: N/A
When used together with: Polycom » C8 » Version: N/A
When used together with: Polycom » Vvx150 » Version: N/A
When used together with: Polycom » Vvx201 » Version: N/A
When used together with: Polycom » Vvx250 » Version: N/A
When used together with: Polycom » Vvx301 » Version: N/A
When used together with: Polycom » Vvx311 » Version: N/A
When used together with: Polycom » Vvx350 » Version: N/A
When used together with: Polycom » Vvx401 » Version: N/A
When used together with: Polycom » Vvx411 » Version: N/A
When used together with: Polycom » Vvx450 » Version: N/A
When used together with: Polycom » Vvx501 » Version: N/A
When used together with: Polycom » Vvx601 » Version: N/A
Polycom » United Communications Software
Versions before (<) 4.0.14.1580
cpe:2.3:o:polycom:united_communications_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Polycom » Soundpoint Ip 300 » Version: N/A
When used together with: Polycom » Soundpoint Ip 301 » Version: N/A
When used together with: Polycom » Soundpoint Ip 320 » Version: N/A
When used together with: Polycom » Soundpoint Ip 321 » Version: N/A
When used together with: Polycom » Soundpoint Ip 330 » Version: N/A
When used together with: Polycom » Soundpoint Ip 331 » Version: N/A
When used together with: Polycom » Soundpoint Ip 335 » Version: N/A
When used together with: Polycom » Soundpoint Ip 430 » Version: N/A
When used together with: Polycom » Soundpoint Ip 450 » Version: N/A
When used together with: Polycom » Soundpoint Ip 500 » Version: N/A
When used together with: Polycom » Soundpoint Ip 501 » Version: N/A
When used together with: Polycom » Soundpoint Ip 550 » Version: N/A
When used together with: Polycom » Soundpoint Ip 560 » Version: N/A
When used together with: Polycom » Soundpoint Ip 600 » Version: N/A
When used together with: Polycom » Soundpoint Ip 601 » Version: N/A
When used together with: Polycom » Soundpoint Ip 650 » Version: N/A
When used together with: Polycom » Soundpoint Ip 670 » Version: N/A
When used together with: Polycom » Soundpoint Pro Se-220 » Version: N/A
When used together with: Polycom » Soundpoint Pro Se-225 » Version: N/A
When used together with: Polycom » Soundstation Duo » Version: N/A
When used together with: Polycom » Soundstation Ip 4000 » Version: N/A
When used together with: Polycom » Soundstation Ip 5000 » Version: N/A
When used together with: Polycom » Soundstation Ip 6000 » Version: N/A
When used together with: Polycom » Soundstation Ip 7000 » Version: N/A
When used together with: Polycom » Soundstation Ip 7000 Video Integration » Version: N/A
When used together with: Polycom » Soundstation Vtx 1000 » Version: N/A
When used together with: Polycom » Soundstation2 » Version: N/A
When used together with: Polycom » Soundstation2 Avaya 2490 » Version: N/A
When used together with: Polycom » Soundstation2 Direct Connect For Nortel » Version: N/A
When used together with: Polycom » Soundstation2w » Version: N/A
Polycom » United Communications Software
Versions before (<) 5.9.0
cpe:2.3:o:polycom:united_communications_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: Polycom » Trio 8500 » Version: N/A
When used together with: Polycom » Trio 8800 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-12948

EPSS FAQ

0.24%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 62 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-12948

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.3	HIGH	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L	2.8	5.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: Low

CWE ids for CVE-2019-12948

CWE-749 Exposed Dangerous Method or Function

The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-12948

https://support.polycom.com/content/dam/polycom-support/global/documentation/remote-code-execution-vulnerability-in-ucs-software-v1-1.pdf

Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-12948

Products affected by CVE-2019-12948

Exploit prediction scoring system (EPSS) score for CVE-2019-12948

CVSS scores for CVE-2019-12948

CWE ids for CVE-2019-12948

References for CVE-2019-12948