CVE-2021-41322

Summary:

Poly VVX 400/410 through 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.

Reference Links(if available):

https://support.polycom.com/content/support.html

https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html

CVSS Score (if available)

v2: / HIGH

v3: /

Links to Exploits(if available)