1. Home
  2. CVE Database
  3. CVE-2024-9579
HIGH · 7.5

CVE-2024-9579

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a l...

Vulnerability Description

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HpPoly Tc8 Firmware< 6.3.2
HpPoly Tc8-
HpPoly Tc10 Firmware< 6.3.2
HpPoly Tc10-
HpPoly Studio G7500 Firmware< 4.3.2
HpPoly Studio G7500-
HpPoly Studio X30 Firmware<= 4.3.2
HpPoly Studio X30-
HpPoly Studio X50 Firmware< 4.3.2
HpPoly Studio X50-
HpPoly Studio X70 Firmware< 4.3.2
HpPoly Studio X70-
HpPoly Studio X52 Firmware< 4.3.2
HpPoly Studio X52-
HpPoly Studio G62 Firmware< 4.3.2
HpPoly Studio G62-

Related Weaknesses (CWE)

CWE-77

References

FAQ

What is CVE-2024-9579?

CVE-2024-9579 is a vulnerability with a CVSS score of 7.5 (HIGH). A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a l...

How severe is CVE-2024-9579?

CVE-2024-9579 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-9579?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Poly Tc8 Firmware, Hp Poly Tc8, Hp Poly Tc10 Firmware, Hp Poly Tc10, Hp Poly Studio G7500 Firmware.