CVE-2023-24282

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2023-03-08

Last modified

2026-07-09

Weaknesses

CWE-79

Affected products

• Trio 8800 Firmware (Poly)

References

• https://www.cryptnetix.com/blog/2023/01/19/Polycom-Trio-Vulnerability-Disclosure.html