CVE-2023-44623.7LowCWE-330

CVE-2023-4462: Poly VVX 601 Web Configuration Application random values

Poly · Trio 8300

Affected: Poly Trio 8300 · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.9%probability of exploitation in the next 30 days

60th percentile

050100

Higher than 60% of scored CVEs

3.7LowCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600 and VVX 601. This affects an unknown part of the component Web Configuration Application. The manipulation leads to insufficiently random values. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249255.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Poly · Trio 8300Versions not stated
Poly · Trio 8500Versions not stated
Poly · Trio 8800Versions not stated
Poly · Trio C60Versions not stated
Poly · CCX 350Versions not stated
Poly · CCX 400Versions not stated
Poly · CCX 500Versions not stated
Poly · CCX 505Versions not stated
Poly · CCX 600Versions not stated
Poly · CCX 700Versions not stated
Poly · EDGE E100Versions not stated
Poly · EDGE E220Versions not stated
Poly · EDGE E300Versions not stated
Poly · EDGE E320Versions not stated
Poly · EDGE E350Versions not stated
Poly · EDGE E400Versions not stated
Poly · EDGE E450Versions not stated
Poly · EDGE E500Versions not stated
Poly · EDGE E550Versions not stated
Poly · VVX 101Versions not stated

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Use of Insufficiently Random Values · Cryptography
Vendor: Poly
Published: December 2023
Band: Unlikely (under 1%), December 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-4462 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.