← Advisories

[MZ-23-01] Poly VoIP Devices

ID: MZ-23-01

Release: December 29, 2023

Credits: Pascal Zenker & Christoph Wolff

The full disclosure report can be found here, an overview of the vulnerabilities is given in our announcement blog post.

Other News

[MZ-24-01] MailCleaner

April 29, 2024

Unauthenticated Command Injection and XSS vulnerabilities in MailCleaner

Multiple Vulnerabilities in Poly VoIP Products

December 29, 2023

We uncovered several vulnerabilities allowing an attacker in the network to take over a Poly VoIP device and turn it into a bug hidden in plain sight.