https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-17981.htmlhttps://patchthecve.com/cve/CVE-2018-17981.htmlWed, 17 Jun 2026 01:46:38 +0000MEDIUM 6.1: Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.https://patchthecve.com/cve/CVE-2019-3702.htmlhttps://patchthecve.com/cve/CVE-2019-3702.htmlWed, 17 Jun 2026 02:35:25 +0000HIGH 8.8: A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.https://patchthecve.com/cve/CVE-2019-7632.htmlhttps://patchthecve.com/cve/CVE-2019-7632.htmlWed, 17 Jun 2026 02:40:46 +0000HIGH 8.8: LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtu_size parameter. The lifesize default password for the cli account may sometimes be used for authentication.