CVE-2024-9579 — Certain Poly Video Conference Devices – Potential Remote Code Execution

CVE-2024-9579

Certain Poly Video Conference Devices – Potential Remote Code Execution PUBLISHED

Description (CNA)

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.

Affected (CNA)

Vendor / product	Versions
HP, Inc. / Certain Poly Video Conference Devices	affected See HP security bulletin reference for affected versions

CWE

CWE-77

References

https://support.hp.com/us-en/document/ish_11536495-11536533-16/hpsbpy03900

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.