SecuriTricks - CVE-2025-14432

Description

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

Product(s) Impacted

Vendor	Product	Versions
Hp	Poly Videoos Poly Eagleeye Cube Poly Eagleeye Iv Poly Studio A2 Poly Studio E60 Poly Studio E70 Poly Studio G62 Poly Studio G7500 Poly Studio Usb Poly Studio X30 Poly Studio X32 Poly Studio X50 Poly Studio X52 Poly Studio X70 Poly Studio X72 Poly Tcos Poly Tc10 Poly Tc8	* - - - - - - - - - - - - - - * - -

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	hp	poly_videoos	/	/	/	/	/	/	/	/
h	hp	poly_eagleeye_cube	-	/	/	/	/	/	/	/
h	hp	poly_eagleeye_iv	-	/	/	/	/	/	/	/
h	hp	poly_studio_a2	-	/	/	/	/	/	/	/
h	hp	poly_studio_e60	-	/	/	/	/	/	/	/
h	hp	poly_studio_e70	-	/	/	/	/	/	/	/
h	hp	poly_studio_g62	-	/	/	/	/	/	/	/
h	hp	poly_studio_g7500	-	/	/	/	/	/	/	/
h	hp	poly_studio_usb	-	/	/	/	/	/	/	/
h	hp	poly_studio_x30	-	/	/	/	/	/	/	/
h	hp	poly_studio_x32	-	/	/	/	/	/	/	/
h	hp	poly_studio_x50	-	/	/	/	/	/	/	/
h	hp	poly_studio_x52	-	/	/	/	/	/	/	/
h	hp	poly_studio_x70	-	/	/	/	/	/	/	/
h	hp	poly_studio_x72	-	/	/	/	/	/	/	/
o	hp	poly_tcos	/	/	/	/	/	/	/	/
h	hp	poly_tc10	-	/	/	/	/	/	/	/
h	hp	poly_tc8	-	/	/	/	/	/	/	/

References

https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080

CVSS Score

8.1 / 10

CVSS Data - 4.0

Attack Vector: NETWORK
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: HIGH
User Interaction: ACTIVE
Scope:
Confidentiality Impact: HIGH
Integrity Impact: NONE
Availability Impact: NONE
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: Dec. 16, 2025, 4:15 p.m.
Last Modified: Dec. 18, 2025, 7:54 p.m.

Status : Analyzed

CVE has had analysis completed and all data associations made.

More info

Source

hp-security-alert@hp.com

CVE-2025-14432