CVE-2025-14432

Poly Video - Sensitive Data Might Be Written to Log File

State: Published
Severity: 8.1 High
Published: Dec 16, 2025
Updated: Dec 17, 2025
Reserved: Dec 10, 2025

Description

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

Scores

CVSS	Score	Vector	Source
4.0	8.1 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N	hp

Weaknesses

CWE-532 Insertion of Sensitive Information into Log File

Affected Products

Product	Versions
Poly G7500HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio G62HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio X72HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio X52HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio X32HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio X70HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio X50HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio X30HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio E70HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio E60HP Inc	before <PolyOS 4.6.1-444242Affected
Poly EagleEye CubeHP Inc	before <PolyOS 4.6.1-444242Affected
Polycom EagleEye IVHP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio A2HP Inc	before <PolyOS 4.6.1-444242Affected
Poly Studio USBHP Inc	before <PolyOS 4.6.1-444242Affected
TC8HP Inc	before <TCOS 6.6.1-7001859Affected
TC10HP Inc	before <TCOS 6.6.1-7001859Affected

References

https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.