UC Software - Improper Neutralization of Special Elements Used in an OS Command

A potential vulnerability was discovered in certain Poly voice products. A flaw in the neutralization of data passed in the input fields within the web UI could result in an authenticated command injection.

HP has identified affected products and corresponding firmware minimum versions that mitigate the potential vulnerabilities. See the affected products listed below.