Privilege Escalation Vulnerability in Polycom VVX 400/410 Phones

CVE-2021-41322

What is CVE-2021-41322?

The Poly VVX 400 and 410 phones running version 5.3.1 are affected by a privilege escalation vulnerability that allows low-privileged users to exploit the password reset process. By modifying a specific POST parameter, an unauthorized user could change the Admin password, leading to potential unauthorized access to administrative features. This vulnerability highlights the importance of securing telephony devices against such access control weaknesses.

References