Command Injection Vulnerability in Poly Clariti Manager by HP
CVE-2025-43020

5.7MEDIUM

Key Information:

Vendor

HP
Status
Poly Clariti Manager
Vendor
CVE Published:
22 July 2025

What is CVE-2025-43020?

A command injection vulnerability has been discovered in Poly Clariti Manager, allowing a privileged user to submit arbitrary input, leading to potential unauthorized execution of commands. This could compromise the integrity of the system. HP has resolved this issue in the latest software update, urging users to upgrade to ensure their systems remain secure.

Affected Version(s)

Poly Clariti Manager See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_12781425-127814...

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-43020 : Command Injection Vulnerability in Poly Clariti Manager by HP