CVE-2025-14432 is a medium-severity vulnerability affecting HP devices, where sensitive data may be inadvertently logged in Microsoft Teams Admin Center (TAC) log files during device configuration changes. This issue is limited to TAC-initiated changes and does not impact configurations made via provisioning servers or device WebUI. The attack requires high privileges, is network-based, and has a high confidentiality impact, but no integrity or availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.6.1-444242CPE matchmatch criteria | cpe:2.3:o:hp:poly_videoos:*:*:*:*:*:*:*:* | ||
< 6.6.1-7001859CPE matchmatch criteria | cpe:2.3:o:hp:poly_tcos:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.