HP Poly EagleEye Cube USB admin authentication bypass exposes settings and internal credentials
Anyone can use admin powers on HP Poly devices without logging in!
Summary
On HP Poly EagleEye Cube USB 1.3.1-001267 devices, broken administrator authentication lets an unauthenticated attacker change admin settings and export configuration files containing internal device credentials. The source names this firmware version as affected.
What to do
Update these devices now!
- HP Poly EagleEye Cube USB
Products and platforms
CVE IDs
Times
First published
First seen