CVE-2023-4462

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600 and VVX 601. This affects an unknown part of the component Web Configuration Application. The manipulation leads to insufficiently random values. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249255.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-330

Affected software

VendorProductVersions
PolyTrio 8300n/a
PolyTrio 8500n/a
PolyTrio 8800n/a
PolyTrio C60n/a
PolyCCX 350n/a
PolyCCX 400n/a
PolyCCX 500n/a
PolyCCX 505n/a
PolyCCX 600n/a
PolyCCX 700n/a
PolyEDGE E100n/a
PolyEDGE E220n/a
PolyEDGE E300n/a
PolyEDGE E320n/a
PolyEDGE E350n/a
PolyEDGE E400n/a
PolyEDGE E450n/a
PolyEDGE E500n/a
PolyEDGE E550n/a
PolyVVX 101n/a
PolyVVX 150n/a
PolyVVX 201n/a
PolyVVX 250n/a
PolyVVX 300n/a
PolyVVX 301n/a
PolyVVX 310n/a
PolyVVX 311n/a
PolyVVX 350n/a
PolyVVX 400n/a
PolyVVX 401n/a
PolyVVX 410n/a
PolyVVX 411n/a
PolyVVX 450n/a
PolyVVX 500n/a
PolyVVX 501n/a
PolyVVX 600n/a
PolyVVX 601n/a

References

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-44637.5A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown codCVE-2023-44647.2A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 5CVE-2023-44656.5A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500CVE-2023-44664.9A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerabilitCVE-2023-44676.6A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Affected by this issue is some unknown functionality of tCVE-2023-44687.6A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of CVE-2023-446894.3e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versions prior to 1.1.1.0 CVE-2023-44695.3The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check CVE-2023-446907.5Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.pyCVE-2023-446939.8D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.CVE-2023-446949.8D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.CVE-2023-447099.8PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via the component plutosvg