cvelistv5 - cve-2025-14432

CVE-2025-14432 (GCVE-0-2025-14432)

Vulnerability from cvelistv5 – Published: 2025-12-16 15:15 – Updated: 2025-12-17 18:48

Title

Poly Video - Sensitive Data Might Be Written to Log File

Summary

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

Severity ?

8.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

References

URL

Tags

https://support.hp.com/us-en/document/ish_1361231…

Impacted products

Vendor

Product

Version

HP Inc

Poly G7500

Affected: 0 , < <PolyOS 4.6.1-444242 (custom)

HP Inc	Poly Studio G62	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio X72	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio X52	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio X32	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio X70	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio X50	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio X30	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio E70	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio E60	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly EagleEye Cube	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Polycom EagleEye IV	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio A2	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	Poly Studio USB	Affected: 0 , < <PolyOS 4.6.1-444242 (custom)
HP Inc	TC8	Affected: 0 , < <TCOS 6.6.1-7001859 (custom)
HP Inc	TC10	Affected: 0 , < <TCOS 6.6.1-7001859 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-14432",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-16T15:21:46.269401Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-17T18:48:49.155Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Poly G7500",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio G62",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio X72",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio X52",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio X32",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio X70",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio X50",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio X30",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio E70",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio E60",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly EagleEye Cube",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Polycom EagleEye IV",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio A2",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Poly Studio USB",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cPolyOS 4.6.1-444242",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TC8",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cTCOS 6.6.1-7001859",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TC10",
          "vendor": "HP Inc",
          "versions": [
            {
              "lessThan": "\u003cTCOS 6.6.1-7001859",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.\u003c/span\u003e"
            }
          ],
          "value": "In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532: Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-16T15:15:04.611Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "url": "https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Poly Video - Sensitive Data Might Be Written to Log File",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2025-14432",
    "datePublished": "2025-12-16T15:15:04.611Z",
    "dateReserved": "2025-12-10T04:26:10.936Z",
    "dateUpdated": "2025-12-17T18:48:49.155Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-14432\",\"sourceIdentifier\":\"hp-security-alert@hp.com\",\"published\":\"2025-12-16T16:15:57.363\",\"lastModified\":\"2025-12-18T19:54:18.570\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"hp-security-alert@hp.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"ACTIVE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"hp-security-alert@hp.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-532\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:hp:poly_videoos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.6.1-444242\",\"matchCriteriaId\":\"9236A14B-98A8-413F-BAB1-35AD7D2C4971\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_eagleeye_cube:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77DFEDD4-9863-426F-8243-AFBA425F59AC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_eagleeye_iv:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DDFDBE1-1CA2-4A9E-BEF5-CC1CF32A44F8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_a2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7AD75D83-4B2D-44A8-88BA-42A0FD58DCEF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_e60:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBFB67C4-AD02-489C-B909-EFB20EE22EF6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_e70:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EB25A1B-AC4D-467C-BC1F-B315D3201FBA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_g62:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF7F293C-3F38-40DB-B909-F6E0C32219E0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_g7500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0B27E0D-4C00-42F8-8772-1C0B1D0F64FC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_usb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5E961C8-A34A-40A0-9C54-D77945649ECF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_x30:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58648CB8-9564-4EAB-8049-65B048EF8000\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_x32:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8E24FE0-2C63-4026-88FC-A8772C4FF891\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_x50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1424706A-4E51-4513-B962-59E9ABDD71E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_x52:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06C69912-7DB0-4510-884B-3FFF7AC6B1FB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_x70:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A94CC22-4C6E-4415-9AB3-E0A3EC7BD672\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_studio_x72:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A28EBB9-EC5D-42A2-BFE4-76E079A92B2E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:hp:poly_tcos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.6.1-7001859\",\"matchCriteriaId\":\"CF3EC071-9A4E-4ACD-B35C-966163AE063D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_tc10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E9083C3-3142-494C-827C-56576ADFCA93\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:hp:poly_tc8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F053C475-D941-4D4B-B433-8D67CD9A2C71\"}]}]}],\"references\":[{\"url\":\"https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080\",\"source\":\"hp-security-alert@hp.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"title\": \"Poly Video - Sensitive Data Might Be Written to Log File\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 8.1, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"ACTIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"HIGH\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"HP Inc\", \"product\": \"Poly G7500\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio G62\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio X72\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio X52\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio X32\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio X70\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio X50\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio X30\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio E70\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio E60\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly EagleEye Cube\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Polycom EagleEye IV\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio A2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"Poly Studio USB\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cPolyOS 4.6.1-444242\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"TC8\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cTCOS 6.6.1-7001859\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"HP Inc\", \"product\": \"TC10\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"\u003cTCOS 6.6.1-7001859\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.5.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eIn limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.\u003c/span\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-532\", \"description\": \"CWE-532: Insertion of Sensitive Information into Log File\"}]}], \"providerMetadata\": {\"orgId\": \"74586083-13ce-40fd-b46a-8e5d23cfbcb2\", \"shortName\": \"hp\", \"dateUpdated\": \"2025-12-16T15:15:04.611Z\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-14432\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-12-16T15:21:46.269401Z\"}}}], \"providerMetadata\": {\"shortName\": \"CISA-ADP\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"dateUpdated\": \"2025-12-16T15:22:39.103Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-14432\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-12-16T15:15:04.611Z\", \"dateReserved\": \"2025-12-10T04:26:10.936Z\", \"assignerOrgId\": \"74586083-13ce-40fd-b46a-8e5d23cfbcb2\", \"datePublished\": \"2025-12-16T15:15:04.611Z\", \"assignerShortName\": \"hp\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2025-14432

Vulnerability from fkie_nvd - Published: 2025-12-16 16:15 - Updated: 2025-12-18 19:54

Severity ?

4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Summary

References

	URL	Tags
	hp-security-alert@hp.com	https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080	Vendor Advisory

Impacted products

Vendor	Product	Version
hp	poly_videoos	*
hp	poly_eagleeye_cube	-
hp	poly_eagleeye_iv	-
hp	poly_studio_a2	-
hp	poly_studio_e60	-
hp	poly_studio_e70	-
hp	poly_studio_g62	-
hp	poly_studio_g7500	-
hp	poly_studio_usb	-
hp	poly_studio_x30	-
hp	poly_studio_x32	-
hp	poly_studio_x50	-
hp	poly_studio_x52	-
hp	poly_studio_x70	-
hp	poly_studio_x72	-
hp	poly_tcos	*
hp	poly_tc10	-
hp	poly_tc8	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:poly_videoos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9236A14B-98A8-413F-BAB1-35AD7D2C4971",
              "versionEndExcluding": "4.6.1-444242",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:poly_eagleeye_cube:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "77DFEDD4-9863-426F-8243-AFBA425F59AC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_eagleeye_iv:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DDFDBE1-1CA2-4A9E-BEF5-CC1CF32A44F8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_a2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7AD75D83-4B2D-44A8-88BA-42A0FD58DCEF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_e60:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DBFB67C4-AD02-489C-B909-EFB20EE22EF6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_e70:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4EB25A1B-AC4D-467C-BC1F-B315D3201FBA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_g62:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF7F293C-3F38-40DB-B909-F6E0C32219E0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_g7500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0B27E0D-4C00-42F8-8772-1C0B1D0F64FC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_usb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5E961C8-A34A-40A0-9C54-D77945649ECF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_x30:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "58648CB8-9564-4EAB-8049-65B048EF8000",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_x32:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8E24FE0-2C63-4026-88FC-A8772C4FF891",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_x50:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1424706A-4E51-4513-B962-59E9ABDD71E7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_x52:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06C69912-7DB0-4510-884B-3FFF7AC6B1FB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_x70:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A94CC22-4C6E-4415-9AB3-E0A3EC7BD672",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_studio_x72:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A28EBB9-EC5D-42A2-BFE4-76E079A92B2E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:poly_tcos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF3EC071-9A4E-4ACD-B35C-966163AE063D",
              "versionEndExcluding": "6.6.1-7001859",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:poly_tc10:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E9083C3-3142-494C-827C-56576ADFCA93",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:hp:poly_tc8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F053C475-D941-4D4B-B433-8D67CD9A2C71",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI."
    }
  ],
  "id": "CVE-2025-14432",
  "lastModified": "2025-12-18T19:54:18.570",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.9,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "HIGH",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "NONE",
          "userInteraction": "ACTIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "hp-security-alert@hp.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-12-16T16:15:57.363",
  "references": [
    {
      "source": "hp-security-alert@hp.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080"
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ],
      "source": "hp-security-alert@hp.com",
      "type": "Secondary"
    }
  ]
}

GHSA-JR38-4278-53PJ

Vulnerability from github – Published: 2025-12-16 18:31 – Updated: 2025-12-18 21:31

Details

Severity ?

4.9 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

8.1 (High)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-14432"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-532"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-16T16:15:57Z",
    "severity": "HIGH"
  },
  "details": "In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.",
  "id": "GHSA-jr38-4278-53pj",
  "modified": "2025-12-18T21:31:34Z",
  "published": "2025-12-16T18:31:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14432"
    },
    {
      "type": "WEB",
      "url": "https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-14432 (GCVE-0-2025-14432)

FKIE_CVE-2025-14432

GHSA-JR38-4278-53PJ

Tags

Sightings

Nomenclature