Polycom SoundStation IP/VVX/RealPresence Trio up to 4.0.11/5.4.5/5.4.6/5.5.1 UCS Web Application Memory information disclosure

Summaryinfo

A vulnerability classified as problematic was found in Polycom SoundStation IP, VVX and RealPresence Trio up to 4.0.11/5.4.5/5.4.6/5.5.1. This affects an unknown part of the component UCS Web Application. The manipulation results in information disclosure (Memory). This vulnerability is identified as CVE-2017-12857. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Polycom SoundStation IP, VVX and RealPresence Trio up to 4.0.11/5.4.5/5.4.6/5.5.1. It has been classified as problematic. Affected is an unknown function of the component UCS Web Application. The manipulation with an unknown input leads to a information disclosure vulnerability (Memory). CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:

Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 are affected by a vulnerability in their UCS web application. This vulnerability could allow an authenticated remote attacker to read a segment of the phone's memory which could contain an administrator's password or other sensitive information.

The bug was discovered 08/21/2017. The weakness was released 08/25/2017 (Website). The advisory is shared for download at support.polycom.com. This vulnerability is traded as CVE-2017-12857 since 08/15/2017. It is possible to launch the attack remotely. The successful exploitation requires a authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

The vulnerability was handled as a non-public zero-day exploit for at least 4 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2 or 5.6.0 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Polycom

Name

• RealPresence Trio
• SoundStation IP
• VVX

Version

• 4.0.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.0.5
• 4.0.6
• 4.0.7
• 4.0.8
• 4.0.9
• 4.0.10
• 4.0.11
• 5.4.0
• 5.4.1
• 5.4.2
• 5.4.3
• 5.4.4
• 5.4.5
• 5.4.6
• 5.5.0
• 5.5.1

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion