PatchTheCVECVE-2023-4463: A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60
CVE-2023-4463 is a medium-severity flaw (CVSS 5.3) affecting ccx 400 firmware, ccx 600 firmware, trio 8800 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256.
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.0% (top 37%) |
| CISA exploited list | No |
| Weakness | CWE-404 |
| Published | 2023-12-29 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-4463?
ccx 400 firmware: mitigate or apply the listed mitigation; ccx 600 firmware: mitigate or apply the listed mitigation; trio 8800 firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2023-4463 being exploited?
CVE-2023-4463 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-4463 affect?
CVE-2023-4463 affects ccx 400 firmware, ccx 600 firmware, trio 8800 firmware. Severity is medium (CVSS 5.3). A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of s
How urgent is CVE-2023-4463?
Priority 44/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2023-4466 LOW 2.7 MITIGATE MITIGATE A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic
- CVE-2023-4465 LOW 2.7 MITIGATE MITIGATE A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio
- CVE-2023-4464 HIGH 7.2 MITIGATE MITIGATE A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Tri
- CVE-2023-4462 LOW 3.7 MITIGATE MITIGATE A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CC