Medium severity · published Dec 16, 2025
CVE-2025-14432
Poly Video - Sensitive Data Might Be Written to Log File
4.9
CVSS
0.4%
EPSS
No
On KEV
Description
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PE
Poly EagleEye Cube · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PG
Poly G7500 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio A2 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio E60 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio E70 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio G62 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio USB · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio X30 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio X32 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio X50 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio X52 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor
PS
Poly Studio X70 · HP Inc
before <PolyOS 4.6.1-444242 · source: vendor