« Volver al listado

CVE-2012-6611

Estado: ModificadaCrítica (9.8)—

An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Polycom — HDX System Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6611",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-02-10T15:15:11.510",
  "references": [
    {
      "url": "https://web.archive.org/web/20130320033016/http://blog.tempest.com.br/joao-paulo-campello/path-traversal-on-polycom-web-management-interface.html",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/43032",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://web.archive.org/web/20130320033016/http://blog.tempest.com.br/joao-paulo-campello/path-traversal-on-polycom-web-management-interface.html",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/43032",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password."
    },
    {
      "lang": "es",
      "value": "Se detectó un problema en Polycom Web Management Interface G3/HDX 8000 HD con el software Durango versión 2.6.0 4740 y la plataforma de desarrollo Polycom Linux 2.14.g3 integrada. Tiene una contraseña administrativa en blanco de forma predeterminada, y se puede usar con éxito sin establecer esta contraseña."
    }
  ],
  "lastModified": "2026-06-16T23:48:28.397",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:polycom:hdx_system_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47A0F187-AA15-4859-BB58-8623FE0CC03E",
              "versionEndIncluding": "3.0.5"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:polycom:hdx_4002:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5E8E84D3-63CE-49C4-A28C-5BA6E461F379"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_4500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7BCC7595-A5E1-4528-8D6B-DE1826E90B66"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_6000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "82F969B1-8A48-4808-BEA6-A8AE39012ABC"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_7001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C71FD8A0-7764-46CB-8E83-9439455A9D12"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_7002:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "405D3D5F-F0D0-4A42-A33D-AD6DBA7541B6"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_8002:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3D7B2480-81EA-4A46-B02E-045FAD422CAA"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_8004:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C7DFCC78-5160-4BBC-BD5A-05E2B7208696"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_8006:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B150C4BF-DA15-42FC-90AE-D5D13DB1A4DC"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_9002:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "115F3A96-75DA-45CE-9594-F3A04589B54A"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_9004:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "00AD2C80-D58A-494A-BA20-2A5B6279AFAD"
            },
            {
              "criteria": "cpe:2.3:h:polycom:hdx_9006:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2312BC5A-8533-4F46-B57C-AB42AE941F8F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}