CVEvulnerability
CVE-2023-4463
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-12-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-404
Description
A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256.
Affected configurations
• poly ccx 400 firmware
• poly ccx 600 firmware
• poly trio 8800 firmware
• poly trio c60 firmware
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html Not Applicable
- https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices github.com
- https://modzero.com/en/advisories/mz-23-01-poly-voip/ modzero.com
- https://vuldb.com/?ctiid.249256 Permissions Required
- https://vuldb.com/?id.249256 Third Party Advisory
- https://modzero.com/en/blog/multiple-vulnerabilities-in-poly-products/ Exploit, Third Party Advisory
- https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html Not Applicable
- https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices github.com
- https://modzero.com/en/advisories/mz-23-01-poly-voip/ modzero.com
- https://vuldb.com/?ctiid.249256 Permissions Required
- https://vuldb.com/?id.249256 Third Party Advisory