CVE-2025-14432: poly videoos before 4.6.1-444242 (exclusive); +17 more affected products

Affected technology

poly videoos · before 4.6.1-444242 (exclusive)
hp

poly tcos · before 6.6.1-7001859 (exclusive)
hp

Poly G7500 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio G62 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio X72 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio X52 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio X32 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio X70 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio X50 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio X30 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio E70 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio E60 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly EagleEye Cube · 0 to before <PolyOS 4.6.1-444242
HP Inc

Polycom EagleEye IV · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio A2 · 0 to before <PolyOS 4.6.1-444242
HP Inc

Poly Studio USB · 0 to before <PolyOS 4.6.1-444242
HP Inc

TC8 · 0 to before <TCOS 6.6.1-7001859
HP Inc

TC10 · 0 to before <TCOS 6.6.1-7001859
HP Inc

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Active user interaction

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 8.1/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.