CVE-2018-18568 : Security Advisory and Response

Polycom VVX 500 and 601 devices are vulnerable to interception of valuable credential information due to a failure in X.509 certificate verification when used with on-premise Skype for Business installations.

Understanding CVE-2018-18568

Attackers can exploit this vulnerability to access sensitive data on affected Polycom devices.

What is CVE-2018-18568?

The vulnerability in Polycom VVX 500 and 601 devices allows attackers to intercept and access valuable credential information by exploiting the failure to properly verify X.509 certificates when used with on-premise Skype for Business installations.

The Impact of CVE-2018-18568

This vulnerability poses a significant security risk as it enables attackers to obtain sensitive credential information, potentially leading to unauthorized access and data breaches.

Technical Details of CVE-2018-18568

Polycom VVX 500 and 601 devices are affected by a critical security flaw that facilitates man-in-the-middle attacks.

Vulnerability Description

The vulnerability in Polycom VVX 500 and 601 devices (5.8.0.12848 and older) allows man-in-the-middle attackers to obtain sensitive credential information due to the failure to validate X.509 certificates when used with on-premise Skype for Business installations.

Affected Systems and Versions

Product: Polycom VVX 500 and 601 devices
Versions: 5.8.0.12848 and older

Exploitation Mechanism

Attackers exploit the vulnerability by intercepting and accessing valuable credential information through the lack of proper X.509 certificate validation.

Mitigation and Prevention

Immediate action is crucial to mitigate the risks associated with CVE-2018-18568.

Immediate Steps to Take

Update affected Polycom VVX devices to the latest firmware version.
Implement network segmentation to limit exposure to potential attacks.
Monitor network traffic for any suspicious activity.

Long-Term Security Practices

Regularly update and patch all devices and software in the network.
Conduct security assessments and penetration testing to identify and address vulnerabilities.

Patching and Updates

Apply patches provided by Polycom for the affected VVX devices.
Stay informed about security advisories and updates from Polycom and other relevant sources.