VVX phones running UC Software versions earlier than 126.96.36.19986 contain weaknesses associated with user passwords and their corresponding password hashing algorithms.
Last Update: 3/14/2022
Initial Public Release: 6/25/2018
Advisory ID: PLYVC18-06
Prior to Poly UC Software 188.8.131.5286
|Poly UC Software 184.108.40.20686 and above|
Poly recommends customers upgrade to firmware build 220.127.116.1186 or later.
Poly recommends following standard best practices for Unified Communications, as detailed in our best practices paper.
Poly would like to thank Brian Camp for reporting security vulnerabilities to us and for their coordinated disclosure.