Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-9579 Details
Description
A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 5, 2024Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.hp.com/us-en/document/ish_11536495-11536533-16/hpsbpy03900 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| hp poly tc8 firmware | < 6.3.2 |
CPE
Remediation
| |
| hp poly tc8 | All versions |
CPE
Remediation
| |
| hp poly tc10 firmware | < 6.3.2 |
CPE
Remediation
| |
| hp poly tc10 | All versions |
CPE
Remediation
| |
| hp poly studio g7500 firmware | < 4.3.2 |
CPE
Remediation
| |
| hp poly studio g7500 | All versions |
CPE
Remediation
| |
| hp poly studio x30 firmware | <= 4.3.2 |
CPE
Remediation
| |
| hp poly studio x30 | All versions |
CPE
Remediation
| |
| hp poly studio x50 firmware | < 4.3.2 |
CPE
Remediation
| |
| hp poly studio x50 | All versions |
CPE
Remediation
| |
| hp poly studio x70 firmware | < 4.3.2 |
CPE
Remediation
| |
| hp poly studio x70 | All versions |
CPE
Remediation
| |
| hp poly studio x52 firmware | < 4.3.2 |
CPE
Remediation
| |
| hp poly studio x52 | All versions |
CPE
Remediation
| |
| hp poly studio g62 firmware | < 4.3.2 |
CPE
Remediation
| |
| hp poly studio g62 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 8, 2024 | Initial Analysis | [email protected] |
| Nov 5, 2024 | New CVE Received | [email protected] |