polycom-hdx-web-exposure: Polycom HDX - Web Interface Exposure

id: polycom-hdx-web-exposure

info:
  name: Polycom HDX - Web Interface Exposure
  author: 0x_Akoko
  severity: low
  description: |
    Detecetd Polycom HDX video conferencing system web interface, potentially allowing unauthorized access to device configuration and video calls.
  reference:
    - https://www.polycom.com/products-services/hd-telepresence-video-conferencing.html
    - https://support.polycom.com/content/support/north-america/usa/en/support/video.html
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
    cvss-score: 6.5
    cwe-id: CWE-200
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.title:"Polycom HDX"
    fofa-query: title="Polycom" && body="HDX"
  tags: polycom,hdx,iot,exposure,video-conferencing,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_any(body, "Polycom", "u_keepalive.htm", "u_status.xml")'
        condition: and
# digest: 4b0a00483046022100ed53135d22ab4209750fdc291869b0bb216316fea6b751fe1cd2c8fb0998b865022100c371f1ddd7ee3a712a19cb50d6630ef7853e314f1c6887d9cc8ea897544a7929:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.