Path Traversal Vulnerability in Poly Edge E Devices
CVE-2025-0858

5.8MEDIUM

Key Information:

Vendor

HP, Inc.

Status
Certain Poly Devices
Vendor
CVE Published:
5 February 2025

What is CVE-2025-0858?

A vulnerability has been identified in the firmware builds of Poly Edge E devices that allows for path traversal, potentially enabling unauthorized information disclosure. This issue affects all firmware versions up to and including 8.2.1.0820, emphasizing the need for users to review and update their systems to mitigate risks associated with sensitive data exposure.

Affected Version(s)

Certain Poly Devices See HP security bulletin reference for affected versions

References

https://support.hp.com/us-en/document/ish_11926124-119261...

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.