← Database

CVE-2022-26479

CRITICAL CVSS: 9.8 Published: 2022-07-17 Modified: 2026-06-17

Description

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor) causes all API calls to execute as admin without authentication.

Affected Platforms

Poly Eagleeye Director Ii FirmwarePoly Eagleeye Director Ii

Weakness Type

CWE-863

References