2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"VVX","vendor":"HP Inc","versions":[{"lessThan":"<UCS 6.4.8","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Edge E","vendor":"HP Inc","versions":[{"lessThan":"<PVOS 8.5.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Trio 8300","vendor":"HP Inc","versions":[{"lessThan":"<UCS 8.1.7.c","status":"affected","version":"0","versionType":"custom"}]}],"source":"hp-security-alert@hp.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate."},{"lang":"es","value":"Una clave de prueba y un certificado incrustados podrían extraerse de un dispositivo Poly Voice utilizando herramientas especializadas de ingeniería inversa. Este certificado extraído podría ser aceptado por un proveedor de servicios SIP si el proveedor de servicios no realiza una validación adecuada del certificado del dispositivo."}],"id":"CVE-2026-0754","lastModified":"2026-06-17T10:11:19.470","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":8.2,"baseSeverity":"HIGH","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"hp-security-alert@hp.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0754","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-03T14:37:58.304323Z","version":"2.0.3"}}]},"published":"2026-03-03T02:16:07.320","references":[{"source":"hp-security-alert@hp.com","url":"https://support.hp.com/us-en/document/ish_14269649-14269682-16/hpsbpy04081"}],"sourceIdentifier":"hp-security-alert@hp.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-321"}],"source":"hp-security-alert@hp.com","type":"Secondary"}]}
|