Poly Lens Desktop

SN_ITAMoD_CV · ‎11-20-2025

Good morning everyone
I am the manager of an IT testing laboratory of the Italian Defense. We are analyzing the software in question and, in particular, we would like to delve deeper into the vulnerability related to CVE-2025-43491 (Ref. HP - HPSBPY04048 Rev. 1). The solution reported in the bulletin indicates that HP has released updates to mitigate potential vulnerabilities and has identified affected products with minimal versions that mitigate potential vulnerabilities. But what exactly did mitigation consist of? Is there a PoC that needs to be replicated to see if the new version (2.3) has actually fixed vulnerabilities in previous versions? Let me know, thanks

Regards

SN

SteffenBaierUK · ‎11-20-2025

Hello @SN_ITAMoD_CV ,

Welcome to the HP Poly community.

The fix is on Poly Lens Desktop Version 2.3.0 and later and we usually do not disclose specific details.

This is a Peer-to-Peer community and not HP Support so if you want to try and potentially get more details you should open a Support ticket.

You can also try and open a Lens Mopinion Bug via https://lens.poly.com/appfeedback

Best Regards

Steffen Baier

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN

SN_ITAMoD_CV · ‎11-20-2025

Hello SteffenBaierUK

Thanks for the quick reply.
I had actually already contacted support but it is not as easy to find this type of information as you can imagine.
I take advantage of your availability to ask if there is a technical support that deals with security so as to better target my request. In the meantime I will try to open an L ens Mopinion Bug as you suggested.

Regards

SN

SteffenBaierUK · ‎11-20-2025

Hello @SN_ITAMoD_CV ,

Again I doubt we disclose how this was found. Its usually a security risk using a scanner reported either by a customer or internally and we then go ahead and address this.

Unsure what more you require other than we addressed this. I am just a volunteer that works for HP.

Best Regards

Steffen Baier

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN

SN_ITAMoD_CV · ‎11-20-2025

Hello

I understand that you are probably not the right person to have any more information on this topic. Thank you for your cooperation.
Kind regards

Create an account on the HP Community to personalize your profile and ask a question