CVE-2021-41322

Poly VVX 400/410 through 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.

Summary:

Poly VVX 400/410 through 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.

Reference Links(if available):

  • https://support.polycom.com/content/support.html
  • https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html
  • CVSS Score (if available)

    v2: / HIGH

    v3: /

    Links to Exploits(if available)