CVE-2025-14432

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-14432
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

4.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:poly_videoos:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hp:poly_eagleeye_cube:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_eagleeye_iv:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_a2:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_e60:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_e70:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_g62:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_g7500:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_usb:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x30:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x32:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x50:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x52:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x70:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_studio_x72:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:hp:poly_tcos:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hp:poly_tc10:-:*:*:*:*:*:*:*
cpe:2.3:h:hp:poly_tc8:-:*:*:*:*:*:*:*
History

30 Sep 2026, 20:10

Type Values Removed Values Added
Summary
  • (es) En escenarios limitados, los datos sensibles podrían escribirse en el archivo de registro si un administrador utiliza el Centro de administración de Microsoft Teams (TAC) para realizar cambios en la configuración del dispositivo. El archivo de registro afectado es visible solo para usuarios con credenciales de administrador. Esto se limita a Microsoft TAC y no afecta los cambios de configuración realizados utilizando el servidor de aprovisionamiento o la WebUI del dispositivo.
Information

Published : 2025-12-16 16:15

Updated : 2026-10-07 11:10

NVD link : CVE-2025-14432

Mitre link : CVE-2025-14432

CVE.ORG link : CVE-2025-14432

JSON object : View

Products Affected

hp

  • poly_studio_x72
  • poly_tc8
  • poly_studio_a2
  • poly_videoos
  • poly_eagleeye_iv
  • poly_studio_g62
  • poly_studio_x30
  • poly_studio_g7500
  • poly_studio_x50
  • poly_studio_x52
  • poly_studio_usb
  • poly_tcos
  • poly_studio_e60
  • poly_studio_x70
  • poly_studio_x32
  • poly_tc10
  • poly_eagleeye_cube
  • poly_studio_e70
CWE
CWE-532

Insertion of Sensitive Information into Log File