CVE-2023-4462

Summary

CVE-2023-4462 is a newly disclosed vulnerability affecting numerous Poly IP phones, including the Trio series, CCX models, and several EDGE and VVX variants. The issue lies within the Web Configuration Application, where manipulation of insufficiently random values occurs. Attacks can be initiated remotely, though the complexity and exploitability are reportedly high. The exploit has been made public, increasing the potential risk for affected organizations. The associated identifier for this vulnerability is VDB-249255.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.