CVE-2023-4463 - CVE House

Back to Database

Status published Medium CVE-2023-4463

Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP Header denial of service

5.3 CVSS

Vulnerability Description

A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4463

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Christoph Wolff
Pascal Zenker

References

More from Poly

View All →

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability

Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorization

Poly Trio 8800 Test Automation Mode backdoor

Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanism

Poly VVX 601 Configuration File Import unverified password change

Affected Vendor

Poly

View all reports →

Affected Software

CCX 400, CCX 600, Trio 8800, Trio C60

Vulnerable Versions:

Unknown

Timeline

Official Publish: December 29th, 2023

Last Modified: August 2nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1498 Network Denial of Service

T1562 Impair Defenses

Defense Evasion

T1190 Exploit Public-Facing Application

T1046 Network Service Discovery