CVE-2023-4463
Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP Header denial of service
- State
- Published
- Severity
- 5.3 Medium
- Published
- Dec 29, 2023
- Updated
- Aug 2, 2024
- Reserved
- Aug 21, 2023
Description
A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | VulDB |
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:N/A:P | VulDB |
Weaknesses
- CWE-404 Denial of Service
Affected Products
| Product | Versions |
|---|---|
CCX 400Poly |
|
CCX 600Poly |
|
Trio 8800Poly |
|
Trio C60Poly |
|
References
- https://vuldb.com/?id.249256vdb-entrytechnical-description
- https://vuldb.com/?ctiid.249256signaturepermissions-required
- https://modzero.com/en/advisories/mz-23-01-poly-voip/related
- https://github.com/modzero/MZ-23-01-Poly-VoIP-Devicesexploit
- https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.htmlrelated
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.