CVE-2019-10689
Medium
Description
VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information.
SeverityMedium
CVSS6.5
Exploit probability—
ProductPolycom Better Together Over Ethernet Connector
PublishedJun 24, 2019
First seenJun 24, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom better_together_over_ethernet_connector | v ≤ 3.9.1 | — |
| polycom unified_communications_software | v ≤ 5.9.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.