CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
polytrio_8800_firmware
5.4.0.12197
polytrio_8800_firmware
5.4.0.12541
polytrio_8800_firmware
5.4.0.12856
polytrio_8800_firmware
5.4.1.17597
polytrio_8800_firmware
5.4.2.5400
polytrio_8800_firmware
5.4.3.2007
polytrio_8800_firmware
5.4.3.2389
polytrio_8800_firmware
5.4.3.2400
polytrio_8800_firmware
5.4.4.7511
polytrio_8800_firmware
5.4.4.7609
polytrio_8800_firmware
5.4.4.7776
polytrio_8800_firmware
5.4.5.9111
polytrio_8800_firmware
5.4.5.9658
polytrio_8800_firmware
5.5.2.11338
polytrio_8800_firmware
5.5.2.11391
polytrio_8800_firmware
5.5.3.3441
polytrio_8800_firmware
5.5.3.3517
polytrio_8800_firmware
5.5.4.2255
polytrio_8800_firmware
5.7.1.4095
polytrio_8800_firmware
5.7.1.4133
polytrio_8800_firmware
5.7.1.4145
𝑥
= Vulnerable software versions
References
http://unkl4b.github.io/Authenticated-RCE-in-Polycom-Trio-8800-pt-1/
https://support.polycom.com/content/support/emea/emea/en/support/voice/polycom-trio/polycom-trio-8800.html
http://unkl4b.github.io/Authenticated-RCE-in-Polycom-Trio-8800-pt-1/
https://support.polycom.com/content/support/emea/emea/en/support/voice/polycom-trio/polycom-trio-8800.html