CVE-2025-0858

5.8 mediumEPSS 0.3%

Medium (5.8). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure.

Severity

CVSS 4.0

5.8 medium

CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-35
Published: 2025-02-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://support.hp.com/us-en/document/ish_11926124-11926148-16/hpsbpy03996

Check your stack JSON