PatchTheCVElifesize vulnerabilities
Recent CVEs affecting lifesize products. 3 tracked.
lifesize has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-01-22. Highest priority: CVE-2019-7632 (score 59/100).
- CVE-2019-7632 HIGH 8.8 MITIGATE MITIGATE LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as d
- CVE-2019-3702 HIGH 8.8 MITIGATE MITIGATE A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authe
- CVE-2018-17981 MEDIUM 6.1 MITIGATE MITIGATE Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.
FAQ
How do I fix lifesize vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lifesize being exploited right now?
None of the tracked lifesize CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lifesize CVE should I patch first?
CVE-2019-7632 currently ranks highest (59/100): LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as d.