CVE-2025-34093 Polycom HDX Series Telnet Command Injection via lan traceroute
Authenticated attackers can execute arbitrary root commands via Telnet traceroute input in Polycom HDX devices with Telnet enabled.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-34093?
CVE-2025-34093 is a high-severity command injection vulnerability in Polycom HDX Series, published on 10 Jul 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible over Telnet. The lan traceroute command in the devcmds console accepts unsanitized input, allowing attackers to execute arbitrary system commands. By injecting shell metacharacters through the traceroute interface, an attacker can achieve remote code execution under the context of the root user. This flaw affects systems where Telnet access is enabled and either unauthenticated access is allowed or credentials are known.
Weakness: CWE-78
Which versions are affected by CVE-2025-34093?
How do I fix CVE-2025-34093?
No fix has been published for CVE-2025-34093 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2025-34093 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-34093 exists.
Public exploit code: 1 Metasploit module.
Sources
Also known as GHSA-hjrc-rmvc-q9q6.