by Kastro
Paper/Archive/CVE-2024-41912

CVE-2024-41912

HP Inc. Poly Clariti Manager — A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 43.2.432 × 208.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls.

Affected

ProductAffectedFixed inSource
Poly Clariti ManagerSee HP Security Bulletin reference for affected versions.–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.hp.com/us-en/document/ish_11006235-11006266-16/hpsbpy03958