HP Poly EagleEye Cube USB management service command injection
Meeting camera devices can be fully taken over through USB.
Summary
An API function on a USB-accessible management service of HP Poly EagleEye Cube USB 1.3.1-001267 devices allows command injection. Attackers without administrator access can run arbitrary commands as root on the device.
Affected when
- USB-accessible management service
What to do
Update these devices now.
- HP Poly EagleEye Cube USB 1.3.1-001267
Products and platforms
CVE IDs
Times
First published
First seen