The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.
| Software | From | Fixed in |
|---|---|---|
| polycom / viewstation_512 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_h.323 | 7.2 | 7.2.x |
| polycom / viewstation_sp_384 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_mp | 7.2 | 7.2.x |
| polycom / viewstation_h.323 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_128 | 7.2 | 7.2.x |
| polycom / viewstation_dcp | 7.2 | 7.2.x |
| polycom / viewstation_v.35 | 7.2 | 7.2.x |
| polycom / viewstation_512 | 7.2 | 7.2.x |
| polycom / viewstation_sp_384 | 7.2 | 7.2.x |
| polycom / viewstation_v.35 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_fx_vs4000 | 4.1.5 | 4.1.5.x |
| polycom / viewstation_128 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_dcp | 6.5.1 | 6.5.1.x |
| polycom / viewstation_mp | 6.5.1 | 6.5.1.x |