CVE-2025-14432
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.
- Score
- CVSS 4.0 8.1 High
- Status
- Analyzed - hp-security-alert@hp.com
- Published
- 2025-12-16
- Last modified
- 2026-10-07
- Weaknesses
- CWE-532
Affected products
- Poly Tcos (Hp)
- Poly Videoos (Hp)
- Poly Eagleeye Cube (Hp Inc)
- Poly G7500 (Hp Inc)
- Poly Studio A2 (Hp Inc)
- Poly Studio E60 (Hp Inc)
- Poly Studio E70 (Hp Inc)
- Poly Studio G62 (Hp Inc)
- Poly Studio Usb (Hp Inc)
- Poly Studio X30 (Hp Inc)
- Poly Studio X32 (Hp Inc)
- Poly Studio X50 (Hp Inc)
- Poly Studio X52 (Hp Inc)
- Poly Studio X70 (Hp Inc)
- Poly Studio X72 (Hp Inc)
- Polycom Eagleeye Iv (Hp Inc)
- Tc10 (Hp Inc)
- Tc8 (Hp Inc)
References
- https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080
