Firmware Flaw in Poly Clariti Manager Devices Leaves Access Controls Vulnerable
CVE-2024-41912
9.8CRITICAL
Summary
A significant vulnerability has been identified in the firmware of Poly Clariti Manager devices, particularly affecting builds up to version 10.10.2.2. This flaw arises from an inadequate implementation of access controls, potentially allowing unauthorized access to sensitive system functions. Such vulnerabilities can compromise the integrity and confidentiality of device management, presenting risks to organizations relying on the software for secure communications.
Affected Version(s)
Poly Clariti Manager See HP Security Bulletin reference for affected versions.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved