An authenticated command injection vulnerability (CWE-78) affects the Polycom HDX Series command shell interface over Telnet. The lan traceroute command in the devcmds console does not properly sanitize input, allowing injection of shell metacharacters. Successful exploitation enables remote code execution with root privileges. This vulnerability requires Telnet access with authentication or unauthenticated access if Telnet is enabled without credentials. The CVSS 4.0 score is 7.5, reflecting network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability.

Exploitation of this vulnerability allows an attacker with Telnet access and valid credentials (or unauthenticated access if Telnet is improperly configured) to execute arbitrary system commands as the root user. This can lead to full system compromise, including unauthorized control over the device and potential disruption of services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable Telnet access on Polycom HDX Series devices if not required, restrict Telnet access to trusted networks, and ensure strong credential management to prevent unauthorized access.