Log in Start free

Vulnerability · Published Dec 16, 2025 · Assigned by hp

CVE-2025-14432Poly Video - Sensitive Data Might Be Written to Log File

High 8.1

In plain English

A high-severity sensitive data in logs in Poly EagleEye Cube from HP Inc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 4.0)8.1High
Exploit odds (30 days)0.4%top 65.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

Affected products (as reported)

VendorProductVersions
HP Inc Poly G7500 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio G62 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio X72 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio X52 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio X32 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio X70 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio X50 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio X30 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio E70 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio E60 0 – before <PolyOS 4.6.1-444242
HP Inc Poly EagleEye Cube 0 – before <PolyOS 4.6.1-444242
HP Inc Polycom EagleEye IV 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio A2 0 – before <PolyOS 4.6.1-444242
HP Inc Poly Studio USB 0 – before <PolyOS 4.6.1-444242
HP Inc TC8 0 – before <TCOS 6.6.1-7001859
HP Inc TC10 0 – before <TCOS 6.6.1-7001859

Weakness: CWE-532 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

References