Vulnerability Details CVE-2023-29930
An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.229
EPSS Ranking 95.6%
CVSS Severity
CVSS v3 Score 8.8
References
- https://github.com/YSaxon/TFTPlunder
- https://help.genesys.com/pureconnect/mergedprojects/wh_tr/mergedprojects/wh_tr_polycom_phones/desktop/configuring_the_tftp_server1.htm
- https://github.com/YSaxon/TFTPlunder
- https://help.genesys.com/pureconnect/mergedprojects/wh_tr/mergedprojects/wh_tr_polycom_phones/desktop/configuring_the_tftp_server1.htm
Products affected by CVE-2023-29930
-
cpe:2.3:a:genesys:tftp_server:-