CVE-2025-14432 — Poly Video - Sensitive Data Might Be Written to Log File

Description (CNA)

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

Affected (CNA)

Vendor / product	Versions
HP Inc / Poly G7500	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio G62	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio X72	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio X52	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio X32	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio X70	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio X50	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio X30	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio E70	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio E60	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly EagleEye Cube	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Polycom EagleEye IV	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio A2	affected 0 before <PolyOS 4.6.1-444242
HP Inc / Poly Studio USB	affected 0 before <PolyOS 4.6.1-444242
HP Inc / TC8	affected 0 before <TCOS 6.6.1-7001859
HP Inc / TC10	affected 0 before <TCOS 6.6.1-7001859

CWE

CWE-532

References

https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.