CVE-2025-0858 — Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User

CVE-2025-0858

Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User PUBLISHED

Description (CNA)

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure.

Affected (CNA)

Vendor / product	Versions
HP, Inc. / Certain Poly Devices	affected See HP security bulletin reference for affected versions

CWE

CWE-35

References

https://support.hp.com/us-en/document/ish_11926124-11926148-16/hpsbpy03996

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.