VULNERABILITY INTELLIGENCE
CVE-2025-43487
CVSS score6.8 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-07-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly implement access controls. HP has addressed the issue in the latest software update.
Weakness classification
- hp-security-alert@hp.com: CWE-250
Primary references
- hp-security-alert@hp.com — Vendor Advisory