Vulnerability Details CVE-2018-10946
An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the admin user's password via the admin web UI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.6%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 2.7
References
- https://support.polycom.com/PolycomService/home/home.htm
- https://support.polycom.com/content/dam/polycom-support/global/documentation/advisory-rp-debut-vulnerabilities.pdf
- https://support.polycom.com/PolycomService/home/home.htm
- https://support.polycom.com/content/dam/polycom-support/global/documentation/advisory-rp-debut-vulnerabilities.pdf
Products affected by CVE-2018-10946
-
cpe:2.3:h:polycom:realpresence_debut:-
-
cpe:2.3:o:polycom:realpresence_debut_firmware:1.0.0
-
cpe:2.3:o:polycom:realpresence_debut_firmware:1.0.1
-
cpe:2.3:o:polycom:realpresence_debut_firmware:1.1.0
-
cpe:2.3:o:polycom:realpresence_debut_firmware:1.1.1
-
cpe:2.3:o:polycom:realpresence_debut_firmware:1.2.0
-
cpe:2.3:o:polycom:realpresence_debut_firmware:1.2.1
-
cpe:2.3:o:polycom:realpresence_debut_firmware:1.3.0