Re: SoundStructure Log4j Vulnerability?

gspargo · ‎12-16-2021

I have seen the Polycom announcement about their assessment of product vulnerabilities against the Log4j threat. https://support.polycom.com/content/dam/polycom-support/global/documentation/plygn-21-08-poly-system...

I see no mention of the Polycom SoundStructure family of products as being either vulnerable or identified as *not* vulnerable. Is there official word from Poly about this product? Trying to see what we need to do with a couple of old C16 systems. Ours are airgapped from the production network but I'd like to know if there are updates we need to apply to mitigate risk.

gspargo · ‎12-16-2021

Just checked the December 16th announcement, still no mention of SoundStructure. PLYGN21-108

SteffenBaierUK · ‎12-21-2021

Hello @gspargo ,

Welcome to the Poly Community.

Is this a SoundSurcture with a Poly VoIP card? If yes then it is the same as a VVX 500

Other SoundStructure installations should not be affected.

If you want an official answer please work with our Support Organisation in your region.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

----------------

If official support is required please check how to phone or open a case here

----------------
The title Poly Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------

⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓SIGNATURE ⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓
Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
Please also ensure you always check the VoIP , Video Endpoint , Microsoft Voice , PSTN or other FAQ's in the different sections