CVE-2018-14934

—

CVSS 3.0

6.5 medium

EPSS

<1%p44

Published

Nov 15, 2018 (Nov 15, 2018)

Modified

Jun 17, 2026

Description

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone.

Vendors: polycom
Products: trio 8500 firmware
Weakness: CWE-732
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.