CVE:CVE-2022-26481
CNNVD:CNNVD-202206-661
Poly Studio X Series是美国Poly公司的一系列一体式视频条。用于视频会议。
Poly Studio X30、Studio X50、Studio X70、G7500 3.4.0-292042版本、3.5.0-344025版本以及3.6.0版本存在操作系统命令注入漏洞，该漏洞源于存在经过身份验证的命令注入漏洞。
solution:Upgrade poly studio_x30_firmware to a higher version than 3.7.0,and avoid the version (,3.7.0); Upgrade poly studio_x70_firmware to a higher version than 3.7.0,and avoid the version (,3.7.0); Upgrade poly g7500_firmware to a higher version than 3.7.0,and avoid the version (,3.7.0); Upgrade poly studio_x50_firmware to a higher version than 3.7.0,and avoid the version (,3.7.0)