CVEvulnerability

CVE-2018-14934

6.5 MEDIUM Published 2018-11-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-11-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-732

Description

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone.

Affected configurations

• polycom trio 8500 firmware (< 5.5.4)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References