Vulnerability CVE-2023-29930
Published: 2023-05-10

Description:
An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page.

 References:
https://github.com/YSaxon/TFTPlunder
https://help.genesys.com/pureconnect/mergedprojects/wh_tr/mergedprojects/wh_tr_polycom_phones/desktop/configuring_the_tftp_server1.htm
Copyright 2026, cxsecurity.com

 

Back to Top