CVE-2018-18566

The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration information by leveraging use with an on-premise installation with Skype for Business.

• CWE-200

• http://www.securityfocus.com/bid/105746Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2018/Oct/33Exploit, Mailing List, Third Party Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-028.txtExploit, Third Party Advisory
• http://www.securityfocus.com/bid/105746Third Party Advisory, VDB Entry
• https://seclists.org/bugtraq/2018/Oct/33Exploit, Mailing List, Third Party Advisory
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-028.txtExploit, Third Party Advisory

Published

Oct 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18559In the Linux kernel through 4.19, a use-after-free can occur…8.1
• CVE-2018-18561An issue was discovered in Roche Accu-Chek Inform II Base Un…
• CVE-2018-18562An issue was discovered in Roche Accu-Chek Inform II Base Un…
• CVE-2018-18563An issue was discovered in Roche Accu-Chek Inform II Instrum…
• CVE-2018-18564An issue was discovered in Roche Accu-Chek Inform II Instrum…
• CVE-2018-18565An issue was discovered in Roche Accu-Chek Inform II Instrum…
• CVE-2018-18567AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allo…
• CVE-2018-18568Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allo…5.9
• CVE-2018-18569The Dundas BI server before 5.0.1.1010 is vulnerable to a Se…
• CVE-2018-1857IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…4.8
• CVE-2018-18570Planon before Live Build 41 has XSS.
• CVE-2018-18571An Incorrect Access Control vulnerability has been identifie…9.1