Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-0754

SIP Service Providers – Possible Impersonation of Poly Voice Device

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hp

Description

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HP Inc VVX

Default version status: unaffected

  • 0 to < <UCS 6.4.8affected

HP Inc Edge E

Default version status: unaffected

  • 0 to < <PVOS 8.5.0affected

HP Inc Trio 8300

Default version status: unaffected

  • 0 to < <UCS 8.1.7.caffected

References