← Database

CVE-2021-37145

HIGH CVSS: 7.2 Published: 2021-09-07 Modified: 2026-06-17

Description

A command-injection vulnerability in an authenticated Telnet connection in Poly (formerly Polycom) CX5500 and CX5100 1.3.5 leads an attacker to Privilege Escalation and Remote Code Execution capability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected Platforms

Poly Cx5100 FirmwarePoly Cx5100Poly Cx5500Poly Cx5500 Firmware

Weakness Type

CWE-77

References