CVE-2025-43021

MEDIUM

Poly Clariti Manager <10.12.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update.

References (1)

Core 1

Scores

CVSS v3 5.7
EPSS 0.0006
EPSS Percentile 18.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-1393
Status published
Products (1)
hp/poly_clariti_manager < 10.12.2
Published Jul 22, 2025
Tracked Since Feb 18, 2026