VULNERABILITY INTELLIGENCE

CVE-2018-14934

CVSS score6.5 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2018-11-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references