A vulnerability in the web-based management interface of VVX Trio SoundStructure SoundPoint and SoundStation phones running Polycom UC Software if exploited could allow an authenticated remote attacker with admin privileges to cause a denial of service (DoS) condition or execute arbitrary code.